DATA PRIVACY STATEMENT
1. General information on data processing
This Data Privacy Statement explains type, scope and purposes of processing of personal data by us as the controller ACTEGA GmbH (hereinafter referred to as “ACTEGA” or “we”) via this website (hereinafter referred to as “offer”).
Our contact details:
Tel +49 281/670-8
The contact details of our data protection officer are as follows:
Data Protection Officer
Tel +49 281/670-0
1.1 Scope of processing of personal data
We process your personal data in principle only if you contact us via this website, if this is necessary for the provision of an operational website or for the presentation and use of our contents, offers and services. Without this processing, we could not provide our offering and usage would be impossible.
1.1.1. Provision of the website
If you visit our website, we log the IP address (i.e. the Internet address) of the computer accessing the site and other general usage data, such as date and time (“user-related data”), in order to evaluate which parts of our website are of particular interest. Your user-related data are rendered anonymous.
The processing of these data serves the internal evaluation of our website’s frequency of use. We pursue our legitimate interest to verify the efficiency of our offer. Legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR.
1.1.2 Contact form
Our website features a contact form, which may be used for making contact electronically. If you take this opportunity, the data entered on the input screen will be transferred to and processed by us. The processing of personal data from the input screen serves the sole purpose of handling the contacting and your concern.
Here, the legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR. Handling of contacting constitutes our legitimate interest for the processing of data. Additional legal basis for data processing is, in case of consent given by you, Art. 6 para. 1 lit. a GDPR.
You may revoke your consent informally at any time. In case the aim of the contacting is the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis for processing.
1.1.3 Email newsletter and advertising by post
If you subscribe to our newsletter, we shall use the information required for this and the data you have otherwise disclosed to regularly send you our email newsletter based on your consent as per Article 6, para. 1, sentence 1 a of the GDPR.
You can unsubscribe to the newsletter at any time, either by sending a message using the contact details outlined below or by clicking a link contained in the newsletter for this purpose. After you unsubscribe, we shall delete your email address, unless you have expressly consented to your data being used further or unless we retain the right to further data usage that is permitted by law and which we shall inform you about in this privacy statement.
One processing purpose involves the newsletter being sent on our behalf by a service provider; we pass on your email address to such provider to this end. This service provider shall be based in a country belonging to the European Union or the European Economic Area.
Above and beyond this, we retain the right to use your first name, last name, and postal address for our own advertising purposes, e.g. to send interesting offers and information about our products by post. This serves to protect our legitimate interests regarding advertising to our customers in the case that said interests prevail when balancing interests as per Article 6, para. 1 f of the GDPR.
1.1.4 Data protection WebSeminars - Information according to Article 13 EU General Data Protection Regulation (EU GDPR)
In order to carry out our WebSeminars, we need some personal data from our WebSeminar participants. These are:
• Your surname and first name
• Your Job title
• Your official email address
• The name of the company where you are currently employed and the address
We conduct our WebSeminars via Clickmeeting. During the WebSeminar, it is possible to ask the lecturer(s) questions via the chat function. Your questions won’t be visible for external participants.
The provision of your personal data is voluntary. The legal basis for the data processing is therefore Article 6 paragraph 1 sentence a of the EU GDPR (voluntary consent). ACTEGA GmbH, Abelstraße 43, 46483 Wesel, Germany, is responsible for the processing. The consent to the processing of your personal data also expressly includes the recording of the WebSeminar and the disclosure of your data in the context of the list of participants and, under certain circumstances, the information you provided in the chat.
Further details, such as the name and address of the company where you are employed, are not considered personal data and therefore do not fall within the scope of data protection.
Due to legal regulations – especially with respect to proof obligations towards tax authorities – the data for participation in our WebSeminars is stored for a period of eleven (11) years.
1.1.5 Data protection MS Bookings
We have integrated the MS Booking functionality from Microsoft Corp. into our website. You can book an appointment for a special event or for a product-related consultation via MS Booking.
For this purpose, we process your name, the e-mail address and phone number you have provided. Your personal data is processed base of your voluntary consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can withdraw this consent at any time with effect for the future.
If you book an appointment with us via MS Booking, you will receive a confirmation email from us as well as an automatic entry of the booked appointment in your calendar. We will also send you an automatically generated reminder e-mail shortly before the appointment.
Your appointments with us are processed by Microsoft Ireland Operations Limited One Microsoft Place South County Business Park Leopardstown Dublin 18 D18 P521 Ireland. Your data will only be processed in the EU or the EEA.
An agreement for the order processing according to Art. 28 GDPR was concluded with Microsoft Ireland Operations Limited via our processor, ALTANA Management Services GmbH. A transfer to third countries, e.g. USA, does not take place. In individual support cases, there may be exceptional access to personal data from the USA by Microsoft Corp., whereby the facts of a transmission are given.
For those cases, the European standard contractual clauses for international transfers were concluded with Microsoft Corp.
In order to put you in touch with the right contact person within ACTEGA, we may forward the information about your booking to other companies within ACTEGA. The legal basis for this disclosure is our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with recital 48 GDPR.
1.2 Legal basis for the processing of personal data
As far as you have given your consent to process personal data, Art. 6 para. 1 lit. a of the GDPR serves as the legal basis for the processing.
For the processing of personal data which serves the execution of a contract to which you are a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing operations, which are necessary to implement pre-contractual measures.
As far as processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis for processing.
In case processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 para. 1 lit. d GDPR serves as the legal basis for processing.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
1.3 Transfer of personal data to third parties
All personal data collected in connection with the provision of this website will only be transferred by us to our affiliates as well as to technical service providers and financial services providers which are employed as processors according to the GDPR. These financial services providers sometimes gather this data themselves when you set up an account with them. In this case, for the registration and ordering process you will have to use your registration data to log on to the financial services provider’s site. The data protection declaration of the respective financial services provider will then apply.
In individual cases, a transfer to a third country outside the EU and the EFTA may occur. However, we transfer personal data only to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon standard data protection clauses adopted by the Commission according to Art. 46 para. 2 lit. c GDPR.
1.4 Data erasure and storage duration
As far as you did not give consent to a specific storage duration, we will store your personal data only as long as this is necessary to pursue the respective processing purpose and if there are no conflicting legal retention or storage periods. After the contract has been processed in full or when the customer account is deleted, further processing of your data will be limited, and your data will be deleted on expiry of the retention periods defined by commercial law and tax law, unless you have consented to your data being used further or unless we retain the right to further permitted data usage, which we shall inform you about in this privacy statement.
We use the consent management tool (CMT) from the company FAKTOR.io to manage our cookies. You can use this CMT to consent to our cookies being placed or block them. If you block our cookies, you might only be able to make limited use of our website and offering.
Essential technical cookies are used for the purpose of ensuring our website and its contents run properly. These purposes also substantiate our legitimate interest in processing personal data. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
You can, of course, configure your browser so that it does not store our cookies on your end device. The Help function in the menu found on most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or even how you can delete all cookies that have already been received and completely block any more cookies.
2.1 Facebook retargeting (website custom audience)
A pixel owned by Facebook Ireland Limited (website custom audiences pixel) is integrated into our website. This pixel enables Facebook Ireland Limited to collect information about how this website is used (e.g. information about what articles users look at). With the aid of other data that Facebook Ireland Limited has stored about you, e.g. because you have an account on Facebook’s social network, such information can be assigned to you personally. The information collected via this pixel can be used to show you relevant advertisements in your Facebook account that pertain to our offerings (retargeting). The information collected via the pixel can also be aggregated by Facebook Ireland Limited, and this aggregated information can be used by Facebook Ireland Limited for its own advertising purposes and for the advertising purposes of third parties. For example, when you access pages on this website, Facebook Ireland Limited can conclude that you have certain interests and utilize this information to advertise third-party offerings. Furthermore, Facebook Ireland Limited can link information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and/or in connection with your usage of the social network Facebook and thus store a profile about you at Facebook Ireland Limited. This profile can be used for advertising purposes. You can find more information about data protection at Facebook Ireland Limited at: https://www.facebook.com/policy.php
Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
2.2 Google services
We use various services from Google LLC on our website.
You can find more information about Google’s services at https://www.google.com/privacy/ads/.
2.2.1 Google Analytics
As a rule, the information generated by the cookie is transferred to and stored on a Google server in the U.S. We use the IP anonymization extension on this website, which means Google first shortens your IP address.
Our legitimate interest as per Article 6, para. 1 f of the GDPR constitutes the legal grounds for the use of Google Analytics.
The services provided by Google also cover reports about how effective our advertising activities are (including across devices), the demographics and interests of our users, and functions for delivering online advertisements across devices, provided if you own a Google account and have consented to ads personalization. The consent you give to Google constitutes the legal grounds for data processing in this case (Article 6, para. 1 a of the GDPR).
You can object to Google Analytics collecting and/or evaluating your data by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout.
2.2.2 Google remarketing function
Google’s remarketing function enables us to show our users advertisements that are based on their interests when they are on other websites within the Google Ads network (either as Google Ads or as advertisements on other websites). An analysis is conducted with regard to how users interact with our website so that after these users have visited our website, targeted advertisements can still be displayed to them on other sites. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, which is classified as a cookie, records the visits of such users. The number serves to clearly identify a web browser on a specific computer and not to identify a person; no personal data is stored. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
You can stop Google using cookies in this way by installing the plugin provided under the following link: www.google.com/settings/ads/plugin. You can also stop Google advertisements being customized to your interests on Google in your browser by activating the “off” button at https://adssettings.google.de/authenticated or by opting out of ads personalization at http://www.aboutads.info/choices/.
2.2.3 Google reCAPTCHA
In certain cases, we use the reCAPTCHA service from Google Inc. to ensure adequate data security when submitting forms. This is primarily used to differ whether the entry is made by a natural person or is misused by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. Therefore, the alternative data protection regulations of Google Inc. apply. Further information about the data protection guidelines of Google Inc. can be found at https://policies.google.com/privacy. The legal basis for the processing is Art. 6 Para. 1 lit c for the fulfillment of legal obligations from Art. 32 GDPR and from § 13 para. 7 TMG.
2.2.4 Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tracking tags can be managed through an interface. The Google Tag Manager only implements those tags. This means that no cookies are used and no personal data is collected by it. The Google Tag Manager triggers other tags, which may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
2.2.5 Google Maps
We use the YouTube.com platform to post our own videos and make them publicly accessible. YouTube is an offering from YouTube LLC, which is headquartered in 901 Cherry Avenue, San Bruno, CA 94066, USA. When you access a (sub)page of our internet offering on which YouTube videos have been integrated in this form, a connection is established to YouTube’s servers and the content is displayed on the website by means of a notification sent to your browser. YouTube content is only ever integrated in the “privacy-enhanced mode”. This mode is provided by YouTube itself to ensure that YouTube does not initially store any cookies on your device. Nonetheless, when you access the relevant pages, your IP address and the other data listed under No. 4 are transferred and, in particular, the information about which of our webpages you have visited is disclosed. This information, however, cannot be traced back to you unless you log into YouTube or another Google service (e.g. Google+) before accessing such pages or unless you are permanently logged in. The privacy-enhanced mode means that as soon as you click to start playing an integrated video, YouTube only stores cookies on your device that do not contain any personally identifiable data, unless you are currently logged into a Google service.
You can find information about how YouTube and Google process data and their privacy policies here: https://policies.google.com/privacy and https://support.google.com/youtube/answer/171780?hl=en
On this website we use easyFeedback to collect and store anonymous surveys. Participation is voluntary. Multiple participation is prevented by a cookie block. With cookie blocking, easyFeedback sets a cookie on the device you use for the survey and matches it with your data. If a cookie with the survey ID is detected on your device, multiple participation can be prevented. The cookie is automatically deleted after 90 days. When you participate in a survey, easyFeedback stores your answers and the type of device you use to participate in the survey and provides this to us in the form of graphs and as Excel and CSV files. easyFeedback does not in any way create user profiles of participants or store demographic or geographic data. Your answers remain stored on the server until they are deleted by us.
We use the LinkedIn platform to share information with our community, place advertisements and send sponsored InMails via a publicly accessible corporate profile.
For marketing and optimization purposes, we use the conversion tracking technology and the retargeting feature of LinkedIn on our website. Therefore, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical, pseudonymous data about your visit and use of our website and to provide us with relevant aggregated statistics on this basis. The information is used to display interest-specific and relevant offers and recommendations to you after you have informed yourself about certain services, information and offers on the website. The relevant data is stored in a cookie. Furthermore, there is the possibility to create anonymous reports on the performance of the advertisements as well as information on website interaction.
The LinkedIn usernames of visitors to our corporate profile and the received requests are processed as personal data. If additional information from the personal LinkedIn profiles is necessary for answering requests, this will also be used. To the same extent, data processing takes place for advertisements and sponsored InMails. The legal basis for processing the data is our legitimate interest in accordance with Art. 6 (1) lit. f DSGVO.
The social network LinkedIn is a service of LinkedIn Ireland Unlimited Company, head office at Gardner House, 2 Wilton Pl, Dublin 2, D02 CA30, Ireland.
If you are logged in to LinkedIn, you can deactivate the data collection at any time by following this link: https://www.linkedin.com/psettings/enhanced-advertising.
3. Career portal / applicant information
It is possible to use our website to apply for an advertised position or to send an unsolicited application. During the online application process, you communicate personal data to us, which we will process for purposes of the application process. All personal data conveyed by you within the context of the application process will only be collected for purposes of the application process.
3.1 Which information will be gathered by us?
During the application process, we gather all information provided by you in the context of your application, as well as, if applicable, further data which we may learn during an interview or online assessment, notably evaluations.
Of course, such evaluation does not contain any defamatory or deprecatory statements. We only record information which is directly associated with the evaluation and the recruitment process or your job profile.
3.2 Treatment of your application data
All personal data conveyed by you within the context of the application process will only be collected for purposes of the implementation of the application process. It is irrelevant, if you apply for an advertised position or if you send an unsolicited application.
Your application for a specific position or your unsolicited application for a certain location will go directly to the relevant personnel department.
In case of an unsolicited application for a certain region or several locations, you provide us with your personal data for verification of your suitability for different, and, if applicable, interdisciplinary positions throughout the group. Therefore it is possible that, in addition to the handling by our HR department, your documents will be forwarded to several of our specialist departments or to HR and specialist departments within the ALTANA Group. In both cases it is possible that your application will be forwarded to the competent specialist departments or to works council.
Furthermore, our department HR Corporate Systems & Recruitment has access to the group-wide applicant management system because of because of system requirements.
3.3 Transfer of data to third countries
Especially in the context of an application process regarding a position in a third country outside the EU and the EFTA, your personal data will be transferred to our subsidiaries in the country in question. However, we transfer personal data only to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon standard data protection clauses adopted by the Commission according to Art. 46 para. 2 lit. c GDPR.
3.4 Storage of your data, applicants’ pool
After completion of the application process, your data will be deleted, according to the applicable data protection regulations, particularly with regard to retention periods.
If we do not find a suitable position for you after completion of the application process, you have the possibility to give consent to inclusion into our applicants’ pool. In case of consent your application data and documents will still be stored in our system and examined for suitability in case of open positions. If you do not give or if you revoke your consent, we will delete your personal data according to the legal provisions, as far as we are not legally obliged to retain your data. You may at any given time informally revoke your consent.
3.5 Purpose of data processing, legal basis, storage duration
In the context of an application process, we collect and process your personal data for the purpose of initiating a possible employment.
The legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR, as well as Art. 6 para. 1 lit. a GDPR to the extent you have given us consent for a certain processing of your data.
Your application data will generally be deleted or the processing will be restricted, as soon as the purpose for storage, i. e. the execution of an application or an employment, is no longer pursued. However, a deletion does not take place as far as the European or national legislative body stipulates a retention obligation for a certain period of time after termination of the application process, or if you have voluntarily given consent to a longer storage of your data. In these cases, the data will be deleted after expiration of the retention period or your consent or the revocation of your consent. A revocation of the consent is possible at any time.
4. Internet Purchasing Network Tool for suppliers
If, as a supplier, you have an interest in our company and communicate this to us through the use of our Internet Purchasing Network Tool, you will be asked to enter contact details for the decision-makers and information providers of your company. We point out that these entries are voluntary. Please only provide details about staff within your company if the latter have consented to the disclosure of this information.
The collection of these data serves the preparation of supplier contracts. Legal basis for processing is Art. 6 para. 1 lit. b GDPR, as well as Art. 6 para. 1 lit. a, as far as you have given consent to a certain processing of your data. You may revoke your consent at any given time. The personal data will only be stored as long as this is necessary for the preparation and execution of a contract.
5. Your rights
In general, i.e. subject to any legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, we inform you that any corresponding request does not require a certain form, you may send such request electronically (notably per email).
You may request information about your personal data from the controller,
You may request the rectification of your personal data by the controller if the data is inaccurate,
You may request deletion of your personal data by the person responsible in accordance with Art. 17 DSGVO resp. § 35 BDSG,
You may request the restriction of further processing of your personal data by the controller,
You have the right to object against further processing of your personal data by the controller, provided that you set out the respective grounds relating to your particular situation. If you have exercised your right to object, we will stop processing your personal data unless we are able to demonstrate compelling legitimate grounds for this processing that override your interests, rights and freedoms, or unless the processing is for the purpose of enforcing, exercising or defending legal claims,
You may request to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another person without hindrance from the controller to which the personal data have been provided,
Furthermore you have the right to file a complaint about the handling of your personal data by a controller with a supervisory authority competent for data protection. In order to facilitate the exercise of this right, we inform you that the supervisory authority competent for our place of business may be contacted under the following address:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen,
Kavalleriestrasse 2-4, 40213 Düsseldorf, Germany
6. Automated individual decision-making, including profiling
Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR, do not take place in connection with the use of our website and our offer.
7. Data security
We apply the technical and organizational measures necessary to protect your data from manipulation, loss, destruction or unauthorized access, and to safeguard their integrity and availability. Our safety precautions are improved constantly corresponding to technical developments.
8. Amendment of this data privacy statement
This data privacy statement has the status of April 1, 2019. We reserve the right to carry out appropriate amendments at any given time.