Privacy policy for the internet presence of corporate benefits GmbH

The information in this privacy policy applies to the processing of personal data on or via our website and is intended to inform you in particular about the scope of processing, the processing purposes, the recipient, legal bases, storage periods and your rights. Personal data includes all information relating to an identified or identifiable natural person, i.e. a human being (hereinafter also referred to as "data subject"), including, for example, your name, address or e-mail address. "Processing" of personal data means in particular the collection, storage, use and transmission of such data.

 

I. Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States as well as other data protection regulations is:

corporate benefits Germany GmbH
Schiffbauerdamm 40
10117 Berlin
Germany

Phone: +49 (0)30 - 206 21 66 0
Fax: +49 (0)30 - 206 21 66 20

E-mail: info@cb-gmbh.com
Web: https://www.corporate-benefits.eu

 

II. Contact information of the data protection officer

TÜV Informationstechnik GmbH
TÜV NORD Group
Am TÜV 1
45307 Essen 
Germany

Phone: +49 (0)201 - 8999-461
Fax: +49 (0)201 - 8999-666
E-mail: privacyguard@tuvit.de

 

III. General information on data processing

 

1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 (1) (a) EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment ofl a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR applies as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR applies as the legal basis for the processing.

2. Data deletion and storage duration

The data subject's personal data shall be deleted or the processing restricted as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject.

 

IV. Provision of the website and creation of log files

 

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device (computer, smartphone, tablet, etc.).

The following data is collected:

(1) Information about the browser type and version used
(2) The IP address of the accessing device
(3) Date and time of access
(4) Web requests to the server
(5) Websites from which the system of the accessing device connects to our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) (f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's device. To this end, the user's IP address shall remain stored for the duration of the session. The data is stored in log files to ensure the website's functionality.

The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.

These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this will be undertaken once the respective session has ended.

If the data is stored in log files, this will be undertaken after 7 days at the latest. Further storage beyond this period is possible. In this case, the user's IP addresses will be deleted or alienated so that a tracing back to the accessing client is no longer possible.

 

V. Language setting cookies

 

1. Description and scope of the data processing

Our website uses cookies to store the user's language settings. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

The following data is stored and transmitted in the cookies:

- Language settings (of website and operating system)

b) Legal basis for the data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR.

c) Purpose of the data processing

We use these cookies for the adaptation of language settings. This is also our legitimate interest in the processing of the personal data.

d) Duration of storage

Cookies are stored on the device with which you visit our website, and the device in turn transmits said information to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features. If you do not change your cookie settings, the language setting cookie will be stored on your device for 12 months.

 

VI. Contact by e-mail or contact form

 

1. Description and scope of the data processing

You can contact us via the e-mail addresses provided on our website. In this case, the user's personal data transmitted with the email will be stored.

Our website also includes a contact form where you can send us enquiries or request quotes.

We collect the data shown in the respective form fields via this form, e.g.:

(1) Company name
(2) Name
(3) E-mail address
(4) Place

We will further include, the data that you may transmit to us, if applicable, via your personal message.

2. Legal basis for the data processing

The legal basis for the processing of the data transmitted in the course of contacting us via e-mail or via the contact form is Art. 6 (1) (f) GDPR. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

3. Purpose of the data processing

The processing of the personal data serves us solely to process the contact request. This also constitutes the necessary legitimate interest in processing the data.

4. Duration of the storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data sent by e-mail or contact form, this is the case when the respective conversation with you has ended. The conversation is ended the circumstances indicate that the matter at hand has been conclusively resolved.

In the event of rejection, applicant data will be deleted no later than three months after notification of the rejection to the applicant.

If, in the course of e-mail communication, data is accumulated that we are obliged to retain or store due to tax regulations, commercial law or other regulations, deletion will only take place after expiry of the respective statutory retention or storage periods. The legal basis for this storage is Art. 6 (1) (c) GDPR.

 

VII. Use of Google services

 

1. Web analysis through Google Analytics

a. Scope of the personal data processing

(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of the use of the tool is to enable the analysis of your user interactions on websites and in apps and to improve our offer through the statistics and reports obtained and to make it more interesting for you as a user.

(2) We primarily record the interactions between you as a user of the website and our website with the help of cookies, data on the device/browser, IP addresses and website or app activities. Google Analytics also collects your IP addresses in order to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user comes from (so-called "IP location determination"). For your protection, however, we naturally use the anonymisation function ("IP masking"), i.e. Google shortens the IP addresses by the last octet within the EU/EEA.

b. Legal basis for the processing of personal data

The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 (1) (s. 1) (a) GDPR). Revocation of your consent is possible at any time without affecting the permissibility of the processing until revocation. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or to install the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.

c. Purpose of the data processing

The processing of the user data by Google Analytics enables us to analyse the surfing behaviour of our users. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness.

d. Duration of the storage

For more information on the scope of services provided by Google Analytics, please visit marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google also applies to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

e. Recipient of the data and transfer to a third country

Google acts as an order processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. We have agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

 

2. Google Campaign Manager (previously DoubleClick by Google)

a. Scope of the personal data processing

We use Google Campaign Manager. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google"). Google Campaign Manager uses cookies to present advertisements that are relevant to you. For this purpose, your browser receives a pseudonymous identification number (ID). This is used to check which advertisements were displayed or accessed in your browser. The use of Google Campaign Manager cookies enables Google and its partner websites to display ads based on previous visits to our website or other websites on the internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. Google will not merge this data with other data collected by Google.

b. Legal basis for the processing of personal data

The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 (1) (s. 1).(a) GDPR). Revocation of your consent is possible at any time without affecting the permissibility of the processing until revocation. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or to install the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.

c. Purpose of the data processing

We use Google Campaign Manager and the data processed in this context for advertising purposes, in particular to be able to show you targeted advertising. For these purposes, our legitimate interest also lies in the processing of personal data.

d. Duration of storage and possibility of objection

Cookies are stored on the user's device and transmitted from it to our site. As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features.

You can also prevent Google from collecting the data generated by the cookies and related to your use of the website as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin

For more information about Google's privacy policies, please visit: https://www.google.com/intl/de/policies/privacy/

e. Recipient of the data and transfer to a third country

The recipient of the data is Google. For cases where personal data is transferred to the USA. Google acts as an order processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. We have agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

 

3. Google Ads

We use the Google Ads service to draw attention to our offers with the help of advertisements. If you access our website via a Google ad, Google Ads will store a cookie in your end device. The legal basis for the processing of your data is Art. 6 (1) (s. 1) (a) GDPR, i.e. the integration only takes place with your consent.

The advertising material is delivered by Google via so-called "ad servers". For this purpose, we and other websites use so-called ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. Through the Google Ads cookies stored on our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values.

The cookies set by Google enable Google to recognise your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Ads customer so that the cookies cannot be tracked across the websites of other Ads customers. Through the integration of Google Ads, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google that provide information about which ads were clicked on how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke is via our Consent Manager or via the following functions: a) by setting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving any third-party ads; b) by setting your browser to block cookies from the domain "www.googleadservices.com", www.google. de/settings/ads, deleting this setting when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link www.aboutads.info/choices, deleting this setting when you delete your cookies; d) by permanently disabling them in your Firefox, Internet explorer or Google Chrome browsers at the link www.google.com/settings/ads/plugin. Please note that in this case you may not be able to fully use all the functions of this offer.

Please find further information on privacy policy at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/en.html.

 

VIII. Microsoft Advertising

We use Universal Event Tracking (UET) on our website via the Microsoft Advertising (formerly Bing Ads) service of Microsoft Corporation (USA). Via UET, Microsoft stores a cookie in the user's browser to enable an analysis of the use of our online offer. This requires that the user has accessed our website via an ad from Microsoft Advertising. In this way, Microsoft and we can recognise that someone has clicked on an ad, been redirected to our online offer and reached a previously determined target page (so-called conversion measurement). No IP addresses are stored for this purpose. No further personal information about the identity of the user is communicated.

Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our Consent Management Tool. Microsoft Advertising is only used with your consent according to Art. 6 (1) (a) GDPR.

In the case of Microsoft services, the transfer of data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Microsoft can be found in the Microsoft privacy statement at http://www.privacy.microsoft.com/en/privacystatement.

 

IX. Other categories of recipients of personal or company-related data

For the provision of our website and the contact options offered, we use various service providers, including host providers and e-mail providers, who, however, process the data stored by them exclusively on our behalf as processors in accordance with Art. 28 GDPR in the European Union.

Use of the SalesViewer® technology

On this website, data is collected and stored for marketing, market research and optimisation purposes using the SalesViewer® technology of SalesViewer® GmbH on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR).

For this purpose, a javascript-based code is used to collect company-related data and the corresponding use. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymised and is not used to personally identify the visitor to this website.

The data stored by Salesviewer is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link www.salesviewer.com/opt-out to prevent the collection by SalesViewer® within this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you will need to click this link again.

X. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you are entitled to the following rights vis-à-vis the person responsible (if applicable, subject to further requirements set out in the relevant regulations):

- The right to information according to Art. 15 GDPR
- The right to rectification according to Art. 16 GDPR
- The right to cancellation ("right to be forgotten") according to Art. 17 GDPR
- The right to restriction of processing according to Art. 18 GDPR
- The right to information according to Art. 19 GDPR
- The right to data portability according to Art. 20 GDPR
- The right of objection according to Art. 21 GDPR
- The right not to be subject to an automated decision according to Art. 22 GDPR
- The right to revoke consent to the processing of personal data according to Art. 7 (3) GDPR

To assert these rights, please contact us using the contact details provided at the beginning of this document.

Without prejudice to any other administrative or judicial remedy, you also have the right to appeal to the competent supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.