Privacy policy.
This English translation is provided for convenience only. The German version is legally binding.
We at workin up GmbH, the operator of the website www.workin.de, take the protection of your data very seriously. Below we would like to inform you about the extent to which, and the purposes for which, we collect and process your personal data on our website www.workin.de (hereinafter the "Website").
• General information; definitions
• Responsibility and contact
• Processing of your personal data
• Disclosure due to legal obligation
• Place of data processing and data security
• Deletion and blocking of personal data
• Data subject rights
• Updates and changes
General information; definitions
Our privacy policy is based on the terms used in the General Data Protection Regulation (GDPR). In this privacy policy, we use, among others, the following terms:
Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (cf. Art. 4(1) GDPR).
Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (cf. Art. 4(2) GDPR).
Controller or controller responsible for the processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (cf. Art. 4(3), first half-sentence, GDPR).
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller (cf. Art. 4(8) GDPR).
Third party means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data (cf. Art. 4(10) GDPR).
Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her (cf. Art. 4(11) GDPR).
Responsibility and contact
The controller for the processing of personal data within the meaning of the GDPR is:
workin up GmbH (hereinafter "workin.", "we", "us")
Kaiser-Wilhelm-Straße 89, 20355 Hamburg
040-60 77 963-91
datenschutz@workin.de .
With this privacy policy we fulfil our information obligations regarding the scope and purposes of the processing of your personal data under Art. 12 - 14 GDPR.
If you would like to access or update your personal data, or if you have questions about data protection on our website, please contact us at any time via the e-mail address provided, datenschutz@workin.de, or by post at the address given above.
by email: datenschutz@workin.de or
by post : at the postal address of the controller with the addition "Datenschutz" (data protection).
Processing of your personal data
The scope and nature of the processing of your personal data differ depending on whether you contact us via our website or simply wish to use it for information purposes. With regard to the data processing operations described below, you can exercise your rights as a data subject (see section 7) at any time.
3.1 Collection of data with your involvement
In connection with the use of this website, we collect and store your personal data if you provide it to us yourself, for example as part of a contact enquiry or when signing up for a newsletter. It is always your own decision whether you give us your data for the relevant purposes.
3.1.1 Enquiries via the contact form on the Website or by e-mail
If you contact us via our contact form or by email, we process the personal data you transmit to us in doing so. In the case of the contact form, we collect and store in particular the personal data you enter in the relevant input fields. This includes the following details:
· First and last name*
· E-mail address*
· any personal data in the message field or in the e-mail.
Contacting us via the contact form is not possible without providing the data marked with an * in the input form.
We process your personal data solely in order to deal with your enquiry (the legal basis is Art. 6 (1) (f) GDPR). If your enquiry relates to our services (e.g. clarifying matters concerning property searches, etc.), we process your personal data for the purpose of initiating or performing a contractual relationship (legal basis: Art. 6 (1) (b) GDPR).
Once the purpose no longer applies, we will delete the data concerned. With regard to this data processing, too, you can exercise your data subject rights at any time (see section 7), and in the case of an informational enquiry unrelated to the initiation of a contract, you can in particular object to the corresponding data processing.
3.1.2 Newsletter
3.1.2.1 Signing up for the newsletter
On the website, workin. offers you the option of signing up for a newsletter that sends you email updates on office space vacancies and developments on the Hamburg property market. You can subscribe to the update service by ticking a checkbox and confirming the "Submit" button with the following text:
Newsletter declaration of consent
I have read and understood the privacy policy. I agree that the data I have entered may be processed for the purpose of sending update e-mails on office space vacancies and developments in the Hamburg real estate market in accordance with Section 3.1.2 of the privacy policy. This consent is voluntary and can be revoked by me at any time.
If you have subscribed to the newsletter and have thereby given your consent to the processing of your data (legal basis: Art. 6 (1) (a) GDPR), we will process your personal data as follows:
When you sign up for the newsletter, your email address and your first and last name are stored. We use this data for internal statistical purposes and to tailor the content of our Update Service more precisely to you.
We use what is known as the double opt-in procedure for newsletter subscriptions. After you sign up for the newsletter, we send an email to the email address you have provided, asking you to confirm that you requested the update emails. If you confirm the registration, the update emails will be sent to your email address on an ongoing basis. If you do not confirm the registration, your registration will be deleted automatically after 48 hours.
3.1.2.2 Salesforce
For the content design, dispatch and response analysis of our newsletter, we use the services of SFDC Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Salesforce"), a subsidiary of Salesforce.com, inc., SalesforceTower, 415 Mission Street, 3rd Floor, San Francisco, California, 94105, USA.
The tool we use is a CRM system with which we process the customer data we hold about you (for example name, business contact details, information about your organisation and your position, and the update service you have subscribed to) and which also helps us to provide you with our update service.
The data processing is carried out on our behalf on the basis of a data processing agreement and EU standard contractual clauses (Article 46 (2) (c) GDPR) that we have concluded with Salesforce. In these, Salesforce undertakes to protect our users' data, to process it only on our behalf and in particular not to pass it on to third parties. In addition, the Salesforce Group has binding corporate rules for processors (known as BCR Processor), which you can view here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/Salesforce-Processor-BCR.pdf
We use the services of Salesforce on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the economic and technical advantages associated with the use of specialised processors.
Further information on data processing by Salesforce and on data protection can be found at www.salesforce.com/company/privacy/ .
3.1.2.3 Unsubscribing from the update service
If you no longer wish to receive the Update Service, you can object to receiving the update emails at any time (Art. 21 GDPR) or withdraw the underlying consent (Art. 7(3) GDPR), thereby cancelling the service. To do so, click the link included in every update email. You will then be guided through the unsubscribe process. Alternatively, you can send us your objection to receiving the update emails by email to datenschutz@workin.de.
3.1.3 Sending of advertising e-mails
Unless you have signed up for the Update Service (see section 3.1.2), we will only send you promotional emails if you have provided us with your email address in the context of a contractual relationship. In this case, we may use the email address you have provided to send promotional emails about our own similar goods or services, even without your express consent. The legal basis for sending these emails is Section 7 (3) UWG (German Act Against Unfair Competition) and Article 6 (1) (f) GDPR.
If you do not wish to receive promotional emails, you can unsubscribe from these emails at any time (Art. 21 GDPR). To do so, either follow the unsubscribe link in the relevant promotional email or send us an email at datenschutz@workin.de .
3.2 Collection of data without your involvement
When you visit our website, we collect and use automatically generated personal data in order to provide our services.
3.2.1 Log files and (session) cookies
When you visit our website, our servers temporarily record the following personal data in what are known as log files:
· your computer's IP address,
· file request of the client (file name and URL),
· http status code as well as the
· The website from which you visit us.
We process your personal data on the basis of our overriding legitimate interest in detecting misuse (spam, viruses, etc.) and in identifying and eliminating faults (legal basis: Art. 6 (1) (f) GDPR).
In addition, our website uses "cookies" in several places, which serve to make our services more user friendly and effective. Cookies are small text files that our website seeks to place on your computer or other internet enabled devices such as tablets or smartphones. If your browser settings accept cookies, your browser adds the text to a small file.
Unless stated otherwise in this privacy policy, the cookies we use are necessary for the functionality and performance of our website. Two different types of cookies may be used on the pages: so-called "session cookies" and "permanent cookies". Session cookies are temporary cookies that remain on your device until you leave the site again. A permanent cookie, on the other hand, remains on your device for a certain period of time even after you have left the site, or until you delete it manually. (How long a cookie remains on your device depends on the "lifespan" of that cookie.) These include, for example, cookies that allow you to log in to the protected area of our website. We use the information stored in the necessary cookies solely to provide you with the services and functions you have requested.
Cookies do not in themselves cause any damage to your computer and do not contain viruses. You can set your browser so that these cookies are not stored in the first place or so that they are deleted at the end of your internet session. Please note, however, that in this case you may not be able to use all the functions of our website.
3.2.2 Google Fonts
On our Website, we use various services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (hereinafter "Google").
If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data.
This is how we use the Google Fonts service. No cookies are stored in your browser through the use of Google fonts. The files (CSS, typefaces/fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com.
According to Google, requests for CSS and fonts are entirely separate from all other Google services. So if you have a Google account, you need not worry that your Google account data will be transmitted to Google while Google Fonts is being used. Google only records the use of CSS (Cascading Style Sheets) and the fonts used.
Google Fonts allows us to use fonts on our own website without having to upload them to our own server. Google Fonts is an important building block for maintaining the quality of our website. All Google fonts are automatically optimised for the web, which saves data volume and is a major advantage particularly when using mobile devices. So when you visit our website, the small file size ensures a fast loading time.
We therefore use Google Fonts on the basis of our legitimate interest in ensuring the quality and performance (through improved loading time) of our entire online service (legal basis: Art. 6(1) first sentence (f) GDPR).
Requests for CSS assets are stored by Google for one day on their servers, which are located mainly outside the EU. The font files are stored by Google for one year. The data is transmitted to Google automatically when the page is accessed. To have this data deleted earlier, you need to contact Google Support at https://support.google.com/?hl=de&tid=331585294560.
You can find further information on Google Fonts and on the purpose and scope of Google's processing of your data in Google's privacy notice, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
3.2.3 Google Maps
This website also uses Google Maps to display interactive maps and to create directions.
If you have given your express consent (legal basis: Art. 6 (1) (a) GDPR), the use of Google Maps may result in information about your use of this website, including your IP address and the parameters entered within the map functions, being transferred to Google in the USA. For this reason, in order to ensure a level of data protection equivalent to that of the EU, we have concluded EU standard contractual clauses (Art. 46 (2) (c) GDPR) with Google, under which Google undertakes to comply with European data protection requirements.
When you access a page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. This data transfer takes place regardless of whether Google provides a user account through which you are logged in, or whether a user account exists at all. If you are logged in to Google, your data will be assigned directly to your account.
Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis is carried out in particular (even for users who are not logged in) in order to provide demand-oriented advertising. Further information on the purposes and scope of the data collection and on the further processing and use of the data by Google, as well as on your rights in this regard and the settings available to protect your privacy, can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.
If you do not want Google to collect data about you via our website, you can of course withdraw the consent you have given at any time with effect for the future. The withdrawal does not affect the lawfulness of the processing carried out up to that point. You can also prevent cookies from being stored by adjusting the settings in your browser accordingly. Please note, however, that in this case you will not be able to use the Google Maps map function.
Further information on the purposes and scope of the data collection and its processing by Google, as well as the rights available to you and the settings you can use to protect your privacy, can be found at: http://www.google.de/intl/de/policies/privacy .
3.2.4 Google tracking and marketing tools
In addition, we use various tracking and marketing tools from Google on our Website.
If you have expressly consented to the respective data processing described under sections 3.2.4.1 and 3.2.4.2 (Art. 6(1)(a) GDPR), Google generates the information required for its service regarding the use of cookies. As a rule, the data is transferred to a Google server in the USA and stored there. To ensure a level of data protection equivalent to that of the EU, we have concluded EU standard contractual clauses with Google (Art. 46(2)(c) GDPR), under which Google undertakes to comply with European data protection law.
You can prevent cookies from being installed in several ways:
· by adjusting your browser settings accordingly; in particular, blocking third-party cookies will mean that you do not receive any third-party ads. Please note that in this case you may not be able to use all functions of our website to their full extent;
· by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin ;
· by deactivating interest-based advertising from providers that are part of the "About Ads" self-regulatory campaign, via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies.
Further information on data protection when using Google Analytics can be found at
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376 .
You can also find further information on the protection of your data when using Google services via the following links:
https://www.google.com/analytics/terms/de.html
https://policies.google.com/?hl=de
3.2.4.1 Google Analytics
Our website uses Google Analytics. Google Analytics stores cookies in your web browser for a period of two years from your last visit. Among other things, the following data is recorded when you visit our website and transferred to a Google server in the USA, where it is stored:
· browser type/version,
· operating system used,
· referrer URL (the previously visited page),
· host name of the accessing computer (IP address),
· time of the server request,
· the achievement of "website goals" (e.g. contact enquiries),
· Your behaviour on the pages (for example clicks, scrolling behaviour and time spent on the site),
· Your approximate location (country and city),
· technical information such as browser, internet provider, device and screen resolution,
· The source of your visit (that is, which website or which advertising medium brought you to us).
In particular, the IP address transmitted by your browser is not merged with any other data held by Google. We have also added the code "anonymizeIP" to Google Analytics on this website. This ensures that your IP address is masked, so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The cookies used by Google Analytics also contain a randomly generated user ID that allows you to be recognised on future visits to the website. The information generated by the cookies is stored together with the randomly generated user ID, which makes it possible to analyse pseudonymous user profiles. This user-related data is deleted automatically after 14 months. Other data remains stored in aggregated form for an indefinite period.
Google uses the information obtained through the use of cookies to analyse your use of our website, to compile reports on website activity and to provide us with further services connected with website use and internet use. This enables us to improve our offering and make it more interesting for you as a user. We also receive information about how our site functions (for example, to identify navigation problems).
In addition, Google is entitled to process the information obtained for its own purposes as well. For this reason, we only use Google's services on our website if you consent to the processing of your personal data (the legal basis is Art. 6 (1) a) GDPR). You can of course withdraw any consent given at any time with effect for the future, as described above under section 3.2.4. You can also obtain an opt-out cookie here; installing it prevents data collection by Google, which is particularly helpful in cases where the deactivation add-on does not work, for example on mobile devices. If you use our website with different browsers/devices, you must carry out the steps described on all browsers/devices.
You can find further information on data protection in connection with the use of Google Universal Analytics at
3.2.4.2 Google Ads
We use the services of "Google Ads" in order to draw attention to our attractive offers on external websites by means of advertising material (known as Google Ads). In relation to the data from the advertising campaigns, we are able to determine how successful the individual advertising measures are. Our aim in doing so is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called "ad servers". For this purpose we use ad server cookies, which allow certain parameters to be measured for performance analysis, such as the display of adverts or clicks by users. If you reach our website via a Google advert, Google Ads stores a cookie on your device. These cookies generally expire after 180 days and are not intended to identify you personally. The analysis values usually stored with this cookie are the
· unique cookie ID,
· number of ad impressions per placement (frequency),
· last impression (relevant for post-view conversions) as well as
· opt-out information (marking that the user no longer wishes to be addressed)
stored. These cookies enable Google to recognise your internet browser. If you visit certain pages on the website of an Ads customer and the cookie stored on your computer has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to that page. A different cookie is assigned to each Ads customer. Cookies therefore cannot be tracked across the websites of Ads customers.
We ourselves do not collect or process any personal data in the aforementioned advertising measures. We are only provided with statistical evaluations by Google. On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
If you have expressly consented to the data processing described (Art. 6(1)(a) GDPR), the marketing tools used will cause your browser to establish a direct connection with Google's server automatically. We have no influence over the scope and further use of the data collected by Google through the use of this tool, and therefore inform you in line with our level of knowledge: through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address.
3.2.5 Google reCAPTCHA
We also use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites.
reCAPTCHA is intended to verify whether data entry on our websites (e.g. in a contact form) is carried out by a human or by an automated program.
Classic captchas use small tasks that are easy for people to solve but present considerable difficulties for machines. With reCAPTCHA, you no longer have to actively solve any puzzles. The tool uses modern risk techniques to distinguish humans from bots. Here you only have to tick the text field "I am not a robot", and with Invisible reCAPTCHA even that is no longer necessary. With reCAPTCHA, a JavaScript element is embedded in the source code and the tool then runs in the background and analyses your user behaviour. From these user actions, the software calculates what is known as a captcha score. Using this score, Google calculates the probability that you are a human even before the captcha is entered. reCAPTCHA, or captchas in general, are used whenever bots could manipulate or misuse certain actions (such as registrations, surveys and so on). The data recorded during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. You are not informed on our website that an analysis is taking place.
Data processing takes place on the basis of our legitimate interest in protecting our services against abusive automated scraping and SPAM and in offering you the best possible user experience (legal basis: Art. 6(1)(f) GDPR).
Further information on Google reCAPTCHA and Google's privacy policy can be found at:
https://www.google.com/intl/de/policies/privacy/ and
https://www.google.com/recaptcha/intro/android.html .
3.2.6 Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows us to manage website tags via a single interface. The tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags (e.g. Google Analytics, see section 3.2.4.1 below), which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.
3.2.7 Facebook Pixel
For further analysis and optimisation and for the economic operation of our offering, we also use the "Facebook Pixel" of the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Facebook").
To ensure a level of data protection equivalent to that of the EU, we have concluded EU standard contractual clauses with Facebook (Art. 46(2)(c) GDPR), under which Facebook undertakes to comply with European data protection law.
Facebook Pixel is integrated on our website directly by Facebook and may store a cookie on your device, provided you have given your express consent to this (Art. 6(1)(a) GDPR). If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our online offering will be recorded in your profile. The data collected about you is anonymous for us and therefore does not allow us to draw any conclusions about your identity. However, the data is stored and processed by Facebook, so that a link to the relevant user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. Should we transmit data to Facebook for matching purposes, this data is encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of matching it with the data likewise encrypted by Facebook.
With the help of the Facebook Pixel, it is also possible for Facebook to determine the visitors of our Website as a target group for the display of ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interest in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel, we can furthermore track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
Furthermore, when using the Facebook Pixel, we use the additional function "advanced matching". In this process, data for the formation of target groups ("Custom Audiences" or "Look Alike Audiences") are transmitted to Facebook in encrypted form.
We only use Facebook Pixel on our website if you consent to this processing of your personal data (Art. 6 (1) (a) GDPR). You can of course withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of the processing carried out up to that point.
You can find further information on the collection and use of data by Facebook, as well as on your related rights and the options for protecting your privacy, in Facebook's privacy policy at https://www.facebook.com/about/privacy/ .
Alternatively, you can deactivate the "Custom Audiences" remarketing function at https://www.facebook.com/settings/?tab=ads#_=_. To do so, you must be logged in to Facebook.
To set which types of adverts are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising. The settings are platform-independent, i.e. they are applied to all devices such as desktop computers or mobile devices. You can also object to the use of cookies that serve reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative and additionally via the US website aboutads.info or the European website youronlinechoices.com.
3.3 Social media platforms
3.3.1 Instagram
We also make use of the technical platform and services of Instagram for our offering. The Instagram service is one of the Facebook products provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook"). As operator of this Instagram page, we are joint controllers together with Facebook. When you visit our Instagram page, personal data are processed by the controllers. As controller of this page, we have entered into agreements with Facebook which, among other things, govern the conditions for use of the Instagram page. Decisive are the Instagram Terms of Use https://help.instagram.com/581066165581870) as well as the other terms and guidelines listed there at the end.
Below we explain which data this involves and how it is processed.
We expressly point out that Facebook stores its users' data (e.g. personal information, IP address, etc.) and may also use this data for commercial purposes. You can find further information on Facebook's data processing in Facebook's data policy at https://de-de.facebook.com/policy.php .
We have no influence over the collection of data and its further processing by Facebook. Furthermore, it is not apparent to us to what extent, at which location and for what duration Facebook stores the data, to what extent Facebook complies with existing obligations to delete data, what analyses and links Facebook carries out with the data, and to whom Facebook passes the data on. If you wish to avoid Facebook processing personal data you have transmitted to us, please contact us by another means. You will find our full contact details in the legal notice on this website or on Facebook.
As a matter of principle, we only collect and use personal data of our users insofar as this is necessary or appropriate for the provision of the functioning Instagram company page or a website linked on Instagram, as well as for our content and services, for example when participating in campaigns, prize draws or similar published via Instagram.
You can contact us via our Instagram page, either by private message or by leaving a comment under a picture. This allows you to approach us with questions about workin., our Instagram page or any other enquiries. When you contact us, we receive in particular your user name, the text of your enquiry and, where applicable, further personal data relating to you. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. Comments are public and visible to all other Instagram users. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) f) GDPR. Your data will be deleted once your enquiry has been conclusively dealt with, provided that no statutory retention obligations prevent this. We assume that an enquiry has been conclusively dealt with if the circumstances indicate that the matter in question has been finally clarified.
Depending on the respective privacy settings of users on Instagram, we can also see if you have liked or shared one of our Instagram pages/posts/comments or have followed our Instagram page. We can also attribute comments on our Instagram pages to you as an Instagram user. The legal basis for this data processing is Art. 6 (1) f) GDPR. Our legitimate interest lies in communicating and interacting with you via Instagram.
The nature and extent of the collection of personal data when visiting an Instagram page therefore also depends on your behaviour and can be influenced by you. It is possible at any time to visit our Instagram page without leaving comments or clicking "Like". Please note that the interactive functions of Instagram are only available after registration. Data relating to this may also be processed by Facebook.
In addition, we receive statistical data from Facebook about visitors to our Instagram pages via the "Insights" function. This involves aggregated data that allows us to gain information about how people interact with our page. Page Insights may be based on personal data collected in connection with a visit to, or an interaction by people with, our page and its content. This function enables us to analyse our page more effectively and to adapt it to the interests of our users. Our legitimate interest under Art. 6(1)(f) GDPR in operating our Instagram page and using the Insights lies in conducting effective marketing via a widely used platform. You can find further information on the "Insights" function here: https://www.facebook.com/iq/tools-resources/audience-insights/ .
You can contact Facebook's Data Protection Officer using the online contact form provided by Facebook at
https://www.facebook.com/help/contact/540977946302970 .
The competent supervisory authority for Facebook Ireland Ltd. is: Data Protection Commission Canal House Station Road Portarlington Co. Laois R32 AP23, Ireland ( https://www.dataprotection.ie ).
3.3.2 Pinterest
We also operate a company profile on the Pinterest platform. The Pinterest service is a service of Pinterest Europe Ltd., Palmerstone House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
Please note that you use Pinterest and its functions at your own responsibility. This applies in particular to the interactive functions. Alternatively, you can also access parts of the information offered via Pinterest on our website.
When you visit our Pinterest page, Pinterest records your IP address, among other things, as well as further information stored in the form of cookies on your device. This information is used to provide us, as the operator of the Pinterest page, with anonymised statistical information about the use of the Pinterest page. This consists of demographic data such as age, gender, place of residence or country, without any reference to identifiable persons. workin. cannot identify any visitor to the workin. Pinterest profile.
In addition, workin. is provided with statistics on the source of visits to the Pinterest profile, the type of device used for access, or the number of page views. As the operator of this Pinterest profile, workin. also receives anonymised statistical data (known as audience insights) from Pinterest. These data do not allow any conclusions to be drawn about the individual visitor, subscriber or registered user (hereinafter collectively "visitors"; in individual cases, only the group of persons to which the respective matter relates is named below). We can only specify the categories of data and visitors according to which Pinterest evaluates its data collection and makes it available in the form of anonymised statistics. These data are used by workin. exclusively for the analysis of user behaviour, so that we can better align our Pinterest profile and our services with the needs and interests of visitors.
We use the data made available on Pinterest under "Audience Insight" to select relevant information for our posts on Pinterest or to commission targeted advertising, so-called "Promoted Pins", for corresponding groups on the platform.
We only receive anonymised information and statistics if the visitor to our Pinterest profile is registered with Pinterest. However, we point out that, as a result of directly accessing our Pinterest profile, for example through the reading of log files (for example IP address) or the setting of cookies, storage of these data by Pinterest itself is possible.
The data transmitted to us by Pinterest is used on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in marketing our products and in the continuous improvement and administration of our offers and products.
We have no influence either on the collection of data by Pinterest or on the data processing operations existing at Pinterest. Nor are the scope of the data collection, the purposes of the processing or the stored retention periods known to us. A forwarding of the data into anonymised statistics can therefore not be ruled out.
If you follow our Pinterest profile as a registered user (Pinterest calls this "subscribing"), Pinterest adds your profile to the list of all subscribers to this profile. Pinterest then makes our pins available to you on your pinboard. The list of our subscribers is provided to workin. by Pinterest. However, this list only contains data that is public, i.e. information that the visitor has voluntarily provided via their Pinterest settings. Exactly which data this is, is decided by each user in their own Pinterest settings. In addition, every user has the option of configuring their privacy individually in their Pinterest settings ( https://www.pinterest.de/settings/privacy ).
In addition, we can also assign comments on our Pinterest posts (so-called pins) as well as activities on the pinboard to individual users.
This data is processed for the purpose stated above and takes place pursuant to Art. 6 (1) a) GDPR on the basis of the consent you give voluntarily by registering and logging in with Pinterest.
You can find further information about Pinterest's data processing in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy .
You can reach Pinterest's data protection officer at the following link:
https://help.pinterest.com/de/data-protection-officer-contact-form
You can object to this specific data processing at any time, either by deactivating the relevant settings under "Personalisation" in your Pinterest account or by enabling the "Do Not Track" setting in your browser.
3.3.3 LinkedIn
workin. operates a profile on the platform "LinkedIn" of the information service LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Please note that you use our LinkedIn page and its functions at your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access parts of the information offered via that page on this website.
When you visit our LinkedIn page, LinkedIn records your IP address among other things, as well as further information collected by means of cookies. This information is used to provide us, as the operator of the LinkedIn pages, with statistical information about the use of the LinkedIn page. The data collected about you in this context is processed by LinkedIn and may in the process be transferred to countries outside the European Union. LinkedIn does not state conclusively and clearly in what way it uses the data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are attributed to individual users, how long LinkedIn stores this data and whether data from a visit to the LinkedIn page is passed on to third parties, and this is not known to us.
When you access a LinkedIn page, the IP address assigned to your device is transmitted to LinkedIn. According to LinkedIn, this IP address is anonymised (in the case of "German" IP addresses) and deleted after 90 days. LinkedIn also stores information about its users' devices (for example as part of the "sign-in notification" function); this may allow LinkedIn to assign IP addresses to individual users.
If you are currently logged in to LinkedIn as a user, a cookie containing an identifier is stored on your device. This enables LinkedIn to track that you have visited this page and how you have used it. The same applies to all other LinkedIn pages. Through LinkedIn buttons embedded in websites, LinkedIn is able to record your visits to these websites and assign them to your LinkedIn profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid the data processing described, you should log out of LinkedIn or deactivate the "stay logged in" function, delete the cookies stored on your device and close and restart your browser. In this way, LinkedIn information by which you could be directly identified is deleted. You can then use our LinkedIn page without your LinkedIn identifier being disclosed. If you access interactive functions of the page (like, comment, share, messages, etc.), a LinkedIn login screen will appear. Once you log in, you will again be identifiable to LinkedIn as a specific user. Information on how you can manage or delete the information held about you can be found at https://www.linkedin.com/legal/privacy-policy .
As the provider of this information service, we do not collect or process any further data arising from your use of our service.
LinkedIn describes in general terms in its privacy policy what information LinkedIn receives and how this is used. There you will also find information on how to contact LinkedIn and on the settings available for advertisements. The privacy policy is available at https://www.linkedin.com/legal/privacy-policy.
3.3.4 Leadinfo
We use the lead generation service provided by Leadinfo B.V., Rotterdam, Netherlands. It identifies visits by companies to our website on the basis of IP addresses and shows us publicly available information about them, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to analyse user behaviour on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and to improve the services. You can find further information at www.leadinfo.com .
Disclosure due to legal obligation
We reserve the right to disclose your personal data if we are legally obliged to do so or if disclosure is required of us by public authorities or law enforcement bodies. Beyond this, we do not pass on any data to third parties.
Place of data processing and data security
Your data is processed predominantly in Germany. Your data will only be transferred to a country outside the European Union or the European Monetary Area if an adequate level of protection within the meaning of Art. 45(2) GDPR has been established for that country, or if EU standard contractual clauses within the meaning of Art. 46(2)(c) GDPR have been concluded with the respective company and an adequate level of protection can thereby be ensured. On this basis, data collected on our website may be forwarded to the United States (for example, to the Salesforce Group). In order to protect your data against unauthorised access and misuse, we have put in place extensive technical and organisational security measures in line with the state of the art and in accordance with European data protection law (Art. 32 GDPR), and, in cases of processing on our behalf, have concluded an agreement pursuant to Art. 28 GDPR.
Deletion and blocking of personal data
We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or, where provided for by the legislator, until an applicable retention period has expired. If the purpose of storage ceases to apply or a legally prescribed retention period expires, the personal data are blocked or deleted in accordance with the statutory provisions, unless the data subject has given us consent to the storage and further processing.
Data subject rights
Right of access: You may request information about the scope, origin and recipients of the stored data as well as the purpose of storage at any time and free of charge (Art. 15 GDPR). If you wish to exercise your right of access, you can contact a member of staff at workin. or the data protection officer at any time.
Right to data portability: you can receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format (Art. 20 GDPR), provided that (1) the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and (2) the processing is carried out by automated means.
Right to rectification : Every person affected by the processing of personal data has the right to demand the immediate rectification of inaccurate personal data concerning them (Art. 16 GDPR). Furthermore, the data subject has the right, taking into account the purposes of the processing, to demand the completion of incomplete personal data.
Right to erasure (right to be forgotten): Every person affected by the processing of personal data has the right to demand from the controller that the personal data concerning them be erased without undue delay, insofar as one of the following grounds applies and insofar as the processing is not necessary (Art. 17 GDPR): (1) The personal data were collected or otherwise processed for purposes for which they are no longer necessary. (2) The data subject withdraws the consent on which the processing was based, and there is no other legal basis for the processing. (3) The data subject objects to the processing, and there are no overriding legitimate grounds for the processing. (4) The personal data were processed unlawfully. (5) The erasure of the personal data is necessary for compliance with a legal obligation.
Right to object: Every person affected by the processing of personal data has the right to object at any time to the processing of personal data concerning them (Art. 21 GDPR).
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. If we process personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of the personal data for the purpose of such marketing.
Right to withdraw consent under data protection law : Every person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time (Art. 7(3) GDPR).
Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).
If you assert a claim, we will examine it and, unless other statutory provisions prevent this, comply with it. We will inform you of the outcome.
No particular form is required in order to exercise your data subject rights. You can, for example, send an email to datenschutz@workin.de or use the contact options on the website. If your request for information relates to specially protected data within the meaning of Art. 9 GDPR, in particular health data, specific identification of your person is required in order to verify your entitlement. In this case, to allow clear verification of the person entitled to the information, the request may be accompanied by, for example, a copy of both sides of your identity documents (copy of identity card, passport or registration certificate), on which the first name and surname, the full address, the date of birth and the place of birth must be clearly legible; other details, such as the photograph, may be redacted.
Updates and changes
Parts of this privacy policy may be changed or updated by us without you being notified in advance. Please check the privacy policy each time before using our services so that you are up to date on any changes or updates.