Privacy policy

für das Gewinnspiel „Workload Automation – Pre-Check“

Thank you for visiting our website www.ipdynamics.de/en and for your interest in our company. With the aim of offering you the highest possible degree of transparency, we inform you below about the type, scope and purpose of the collection, processing and use of personal data that arise in the context of the use of our website. The General Data Protection Regulation (hereinafter referred to as "GDPR") can be downloaded here as a complete document.

Contents

  1. Definitions of terms
  2. Responsible party according to Article 4 No. 7 GDPR
  3. Data Protection Officer
  4. Lawfulness of processing
  5. Storage of data / deletion of data
  6. Transfer of personal data
  7. Collection of personal data
    1. Use of our website for information purposes only
    2. Contact by email
    3. Applications
      1. Application forms
      2. Use of the HR software Personio
  8. Webflow
    1. Hosting
      1. Fastly
      2. Amazon CloudFront
    2. Cloudflare
    3. webflow.com
    4. Legal basis
  9. Streamboxy
  10. Cookies
  11. CookieFirst
  12. Matomo
  13. LinkedIn Insight Tag
  14. YouTube
  15. Career contact form
  16. Your rights
  17. Right of objection
  18. Data security

The following terms that we use within our privacy policy are defined within Art. 4 GDPR. This is only an excerpt from Art. 4 GDPR.All definitions can be found in the GDPR (available here).

  • Personal data (Art. 4 No. 1 GDPR)‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Processing (Art. 4 No. 2 GDPR)‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Pseudonymisation (Art. 4 No. 5 GDPR)‘Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
  • Controller (Art. 4 No. 7 GDPR)‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
  • Processor (Art. 4 No. 8 GDPR)‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • Third party (Art. 4 No. 10 GDPR)‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  • Consent (Art. 4 No. 11 GDPR)‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
  • Enterprise (Art. 4 No. 18 GDPR)‘Enterprise’ means a natural or legal person engaged in an economic activity, irrespective of its legal form, including partnerships or associations regularly engaged in an economic activity;

You can contact our data protection officer by email: or by mail (IP Dynamics GmbH, Billstrasse 103, 20539 Hamburg) with the addition „Attn. Data Protection Officer“.

Following the storage period, the personal data will be deleted or blocked unless further storage is required by us on a legal basis. In addition, storage beyond the specified period is possible in the event of a (possible) legal dispute with you or other legal proceedings.

If your personal data is transferred, you will be informed accordingly at the relevant point in our privacy policy. If your personal data is transferred outside the European Economic Area and thus to so-called third countries, you will be informed accordingly at the relevant point in our privacy policy. In general, we only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can guarantee the careful handling of personal data on the basis of contractual agreements or other suitable guarantees.

  • Status of access / Hypertext Transfer Protocol (http)
  • Amount of data transferred in each case
  • Website from which our website is accessed (Referrer URL)

The legal basis for the collection of the listed data results from Art. 6 para. 1 sentence 1 lit. f GDPR. We have a legitimate interest in ensuring error-free connection establishment and convenient use of our website as well as analyzing system stability and security and using the data for other administrative purposes.

The data you enter in the application form will first be transferred to our servers, which are located in the data center of the company IPHH Internet Port Hamburg GmbH, Wendenstrasse 408, 20537 Hamburg, Legal notice: https://www.iphh.net/de/impressum.html. We have concluded a corresponding Data Processing Agreement with the company IPHH Internet Port Hamburg GmbH. You can access the privacy policy of IPHH Internet Port Hamburg GmbH here: https://www.iphh.net/en/datasecurity.html. The data is then transferred via an interface (API) to our HR software Personio from Personio SE & Co. KG, Seidlstraße 3, 80335 Munich (hereinafter referred to as "Personio"), Legal notice: https://www.personio.com/legal-notice/. Personio's privacy policy can be found here: https://www.personio.com/privacy-policy/.

https://assets.ctfassets.net/p03bi75xct27/6TFQJxhCudjHfzhdB9L1OZ/cdfcdbc2a8fe3031bcfa3065213e46fc/2022_AWS_DataSecurity_Brochure_EN.pdf

Our website is hosted by the company Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103 (hereinafter referred to as "Webflow"). Webflow also provides the content management system for our website. We have signed an Data Processing Agreement with the company, which contains the standard contractual clauses for the transfer of personal data to third countries in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (available here in English). You can access Webflow's global privacy policy here: https://webflow.com/legal/privacy. You can access the privacy policy for the EU and Switzerland here: https://webflow.com/legal/eu-privacy-policy.

Webflow hosts our website using the content delivery networks of the US companies Fastly Inc. and Amazon Web Services, Inc. A content delivery network is a network of geographically distributed, possibly interconnected servers. The server closest to the respective user of the website is always used. The CDN used here includes servers in North America and parts of Europe. You can find more information on the following Webflow page: https://webflow.com/blog/what-to-look-for-in-a-web-hosting-service.

Webflow hosts our website using the content delivery network of the US company Fastly Inc. 475, Brannan St. #300, San Francisco, CA 94107. You can access the company's privacy policy here: https://www.fastly.com/privacy/.

Webflow hosts our website using the Content Delivery Network of the US company Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109. The CDN is called Amazon CloudFront. You can access the company's legal notice here (only available in German): https://aws.amazon.com/de/impressum/?nc1=f_cc. You can access the company's privacy policy here: https://aws.amazon.com/privacy/?nc1=h_ls.

In order to ensure cross-browser compatibility so that the modern functionality of Webflow pages is also available in older browsers that do not support it natively, Webflow integrates JavaScript using the Cloudflare CDN. The CDN is operated by Cloudflare, Inc, 101 Townsend St., San Francisco, CA 94107. You can access the company's privacy policy here: https://www.cloudflare.com/privacypolicy.

For our webinars, we use Streamboxy, a platform provided by Makonis GmbH, Walter-Gropius-Straße 15, 80807 Munich, Germany, as part of data processing. Streamboxy processes the following data of the participants for the provision of the platform: first and last name, email address, telephone number, audio and video of events. This data is passed on to us, and information such as the type of web browser, the operating system used and similar data is also collected when the platform is accessed. you can find further information at: https://en.streamboxy.com/privacy-platform.

  • First of all, a distinction is made according to who has set the respective cookie (website operator in the form of first-party cookies or third parties in the form of third-party cookies).
  • Then there is a distinction regarding the duration of storage.
    • There are transient cookies that are automatically deleted when the browser is closed, which mainly concerns so-called session cookies that store a session ID. These session cookies are used to recognize your computer when you visit our website again within a session using the same browser. When you close the browser or log out, these temporary cookies are deleted.
    • There are also so-called persistent cookies, which are stored for a longer period of time (up to two years). However, the period until deletion differs from cookie to cookie. You can delete these cookies manually at any time via your browser settings.
    • Flash cookies form another group. This is a Flash Player-bound cookie that stores the technical data required to play video or audio content (e.g. image quality or network speed), whereby there is normally no automatic expiration date and the cookies store the required data independently of the browser used. Some browsers (e.g. Firefox) offer the option of deleting Flash cookies together with the other cookies.
  • Furthermore, a distinction is made between cookies based on their function, which is most relevant from a data protection perspective.
    • Technical (essential) cookies are cookies that are necessary to perform basic functions of the website (e.g. saving a product that has been placed in the shopping cart).
    • Performance cookies collect information about the use of the website and any errors that occur. This is anonymous information that is used to improve the website.
    • By means of advertising cookies or targeting cookies, it is possible to display customized advertising (also from third-party providers) to the user of the website and to determine the effectiveness of this advertising.
    • Sharing cookies connect the website with other services (e.g. social media presences).

Automated, we only use technical cookies and thus cookies that are essential for the operation of our website on the basis of our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR in order to effectively design and continuously improve our website.

We would like to point out that you can prevent the storage of cookies at any time by setting your browser accordingly. We have compiled further information in this context with regard to the most common browsers below, but would like to point out that this may restrict the functionality of our website.

We use the consent management tool CookieFirst of the company Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018DH Amsterdam (hereinafter referred to as "Digital Data Solutions"). The privacy policy of Digital Data Solutions can be found here: https://cookiefirst.com/legal/privacy-policy. We have signed a corresponding Data Processing Agreement with Digital Data Solutions (you can access the contract here: https://cookiefirst.com/legal/data-processing-agreement). In general, personal data is only processed within the borders of the European Union and the countries designated by the European Commission as providing an adequate level of protection. The CookieFirst tool automatically sets cookies and describes the local storage to save the decisions you have made regarding data protection settings. The legal basis results from Art. 6 para. 1 sentence 1 lit.c GDPR, as we thus ensure compliance with legal requirements.

We use the web analysis tool "Matomo" (https://matomo.org/). Matomo is an open source tool that is maintained by the company "InnoCraft Ltd", 150 Willis St, 6011Wellington, New Zealand, https://www.innocraft.com/ (hereinafter referred to as "InnoCraft") (InnoCraft Ltd. was founded by the developers of Matomo). Matomo creates user profiles in anonymized form, with the help of which we can analyze and optimize our website accordingly. Matomo collects the following data:

The data is automatically deleted after 300 days. Matomo's privacy policy can be found here: https://matomo.org/privacy-policy/. Cookies are used when Matomo is used. In this regard, we only use Matomo once you have given us your consent via our consent tool. The legal basis for the use is Art. 6 para. 1 lit. a GDPR if you have given your consent. You can change or revoke your consent at any time by clicking on the "Revocation / change of data protection settings" button located in the footer of the website. InnoCraft itself states (https://matomo.org/gdpr-analytics/) that the data is stored in the EU (Matomo Cloud).

We use the tracking tool "LinkedIn Insight Tag". LinkedIn Insight Tag is a tracking and analysis tool from the company "LinkedIn Ireland Unlimited Company", Wilton Place, Dublin 2, Ireland, https://about.linkedin.com/ (hereinafter "LinkedIn").

With the LinkedIn Insight Tag and data collection, we analyze incoming website visits via LinkedIn and measure our LinkedIn campaigns. We also use the data for retargeting campaigns on LinkedIn.

LinkedIn's privacy policy can be found here:https://www.linkedin.com/legal/privacy-policy

We integrate YouTube videos on our website. This is a video portal of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, legal notice: https://www.google.de/contact/impressum.html. The parent company of this Irish-based company is: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google's privacy policy can be found here: https://policies.google.com/privacy. We have implemented the videos in an "extended data protection mode". If you call up a subpage on which a YouTube video is implemented and play it, Google receives the information about this call and the personal data mentioned in this privay policy is transmitted to Google for purely informational use of the website. This transfer is used by Google to create a user profile and takes place regardless of whether you have a Google account. However, if you do have an account and you are logged into your account when you access a subpage on which a YouTube video is embedded, this data will be linked to your account. This data is stored by Google and used for advertising and/or market research purposes, such as the provision of customized advertising. With regard to storage, please refer to the information provided by Google, available at: https://policies.google.com/technologies/retention

We only use YouTube if you have given us your explicit consent to do so via the consent tool (Art. 49 para. 1 sentence 1 lit. a GDPR, Art. 6 para. 1 lit. a GDPR).

Below we inform you about your rights under the GDPR. You can download the GDPR as a complete document here.

In addition to the aforementioned rights, you also have the right to object at any time to the processing of your personal data, which is based on the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e GDPR) or to safeguard legitimate interests on our part (Art. 6 para. 1 sentence 1 lit. f GDPR), with effect for the future, provided that there are reasons for this arising from your particular situation. If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. If your personal data is processed for the purpose of direct marketing or profiling, insofar as there is a connection to direct marketing, you have a general right to object without the need for reasons arising from your particular situation. In the event of an objection, we will immediately stop processing the personal data for these purposes.  To exercise your right of revocation or objection, simply send an email to: