In this privacy policy, we, PRofiFLITZER GmbH, inform you about the processing of personal data when using our website: profiflitzer.de. You can print or save this privacy policy using the functions of your browser.

1. contact person

The contact person and so-called controller for the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (GDPR) is the

PRofiFLITZER GmbH
Streusstrasse 67-68
13086 Berlin

Phone: +49 (0) 30 509 307 500
Fax: +49 (0) 30 509 307 599
E-mail: kontakt@profiflitzer.de

For all questions on the subject of data protection in connection with our products or the use of our website, you can also contact our data protection officer at any time. This person can be reached at the above postal address and at the e-mail address given above (keyword: “Attn. Data Protection Officer”). We expressly point out that if this e-mail address is used, the contents will not be exclusively noted by our data protection officer. Therefore, if you wish to exchange confidential information, please first contact us directly via this email address.

We have our own privacy policy for our job portal my-PRofiFLITZER.de. You can access this via the following button.

TO THE PRIVACY POLICY

2.1. Calling our website / access data

Each time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes the so-called HTTP header information, including the user agent, and includes in particular:

• IP address of the requesting device;
• Date and time of the request;
• Address of the called website and and path of the requested file
• if applicable, the previously accessed website/file (HTTP referrer);
• Information about the browser and operating system used;
• Method of the request (e.g. GET, POST), version of the HTTP protocol, HTTP status code, size of the delivered file;
• Request information such as language, type of content, encoding of content, character sets;
• cookies of the accessed domain stored on the terminal device.

The data processing of this access data is necessary to enable the visit of the website, to ensure the permanent operability and security of our systems as well as for the general administrative maintenance of our website. For the purposes described above, the access data is also stored temporarily in internal log files, with the content limited to what is strictly necessary, in order to find the cause of and take action against repeated or criminally intended calls that endanger the stability and security of our website.

The legal basis for this processing is Art. 6 para. 1 p. 1 lit. b DSGVO, if the page view occurs in the course of the initiation or execution of a contract, and otherwise Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in enabling website access and the long-term functionality and security of our systems.

The log files are stored for 30 days and archived after subsequent anonymization. Exceptionally, individual log files and IP addresses are kept longer in order to prevent further attacks from this IP address in the event of cyber attacks and/or to take action against the attackers by way of criminal prosecution.

2.2 Contacting

You have the possibility to contact us in particular by e-mail or telephone. In this context, we process your data exclusively for the purpose of communicating with you.

The legal basis for this processing is Art. 6 para. 1 lit. b DSGVO, insofar as your information is required to answer your inquiry or to initiate or execute a contract, and otherwise Art. 6 para. 1 lit. f DSGVO due to our legitimate interest that you contact us and that we can answer your inquiry. We will only make promotional telephone calls if you have given your consent to do so. If you are not an existing customer, we will only send you promotional emails based on your consent. The legal basis in these cases is Art. 6 para. 1 lit. a DSGVO in conjunction with. § 7 para. 2 No. 1 or 2 UWG.

The data we collect when you contact us will be deleted after we have fully processed your request, unless we still need your request to fulfill contractual or legal obligations (see section “Storage period”).

3.1. Cookie Policy

This Site uses various services and applications (collectively, “Tools”) provided either by us or by third parties. For the related use of cookies and similar technologies, in addition to the information mentioned here, we also refer to our separate Cookie Policy at: https://profiflitzer.de/cookie-richtlinie-eu/. This contains information about the individual information stored and accessed on your terminal device, including the purposes and duration of storage. The cookie policy is updated dynamically.

3.2. Technologies used

For example, the tools used may use the following technologies to store or access information in the terminal device:

• Cookies: information stored on the terminal device, consisting in particular of a name, a value, the storing domain and an expiration date. So-called session cookies (e.g. PHPSESSID) are deleted after the session, while so-called persistent cookies are deleted after the specified expiration date. Cookies can also be removed manually.
• Web Storage (Local Storage / Session Storage): information stored on the terminal device, consisting of a name and a value. Information in the Session Storage is deleted after the session, while information in the Local Storage has no expiration date and basically remains stored unless a mechanism for deletion has been set up (e.g. storage of a Local Storage with time entry). Information in Local and Session Storage can also be removed manually.
• JavaScript: programming codes (scripts) embedded in or called up from the website that set cookies and web storage, for example, or actively collect information from the end device or about the usage behavior of visitors. JavaScript can be used for “active fingerprinting” and usage profiling. JavaScript can be blocked by a setting in the browser, although most services will then no longer function.
• Pixel: tiny graphic automatically loaded by a service, which can make it possible to recognize visitors by automatically transmitting the usual connection data (in particular IP address, information about the browser, operating system, language, address called up and time of call-up) and to determine, for example, the opening of an e-mail or the visit to a website. With the help of pixels, “passive fingerprinting” and the creation of usage profiles can thus be carried out. The use of pixels can be prevented, for example, by blocking images, such as in e-mails, although the display is then severely restricted.

With the help of these technologies and also by simply establishing a connection on a page, so-called “fingerprints” can be created, i.e. usage profiles that do not require the use of cookies or web storage and can still recognize visitors. Fingerprints due to connection establishment cannot be completely prevented manually.

Most browsers are set by default to accept cookies, run scripts, and display graphics. However, you can usually adjust your browser settings to reject all or certain cookies or to block scripts and graphics. If you completely block the storage of cookies, the display of graphics and the execution of scripts, our services will probably not work or not work properly.

The tools we use are listed below by category. It also explains in which cases we obtain your voluntary consent to use the tools and how you can revoke it.

3.6.1. Purposes, legal bases, data processed

We use certain tools to enable the basic functions of our website (“necessary tools”). These include, for example, tools for preparing and displaying website content, language storage, storage of previously viewed content, consent management, management and integration of tools, fraud detection and prevention, and ensuring the security of our website. Without these tools we could not provide our service. Therefore, necessary tools are used without consent.

The legal basis for necessary tools is the necessity to fulfill our legitimate interests according to Art. 6 para. 1 lit. f DSGVO in the provision of the respective basic functions and the operation of our website. In cases where the provision of the respective website functions is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, the legal basis for the data processing is Art. 6 para. 1 lit. b GDPR. Access to and storage of information in the terminal device is absolutely necessary in these cases and is carried out on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 2 TTDSG.

In the event that personal data is transferred to third countries (such as the USA), we refer to Section 7 “Data transfer to third countries” in addition to the information provided below.

3.6.2. Google Tag Manager

Our website uses Google Tag Manager, a service provided for persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other persons by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together “Google”).

The Google Tag Manager is used exclusively to manage website tools by integrating so-called website tags. A tag is an element that is placed in the source code of our website to run a tool, such as scripts. If these are optional tools, they are only integrated by Google Tag Manager with your consent. The Google Tag Manager uses JavaScript and does not require the use of cookies.

The legal basis is Art. 6 para. 1 lit. f DSGVO, based on our legitimate interest to include and manage multiple tags on our website in a straightforward manner.

For the purpose of ensuring stability and functionality, Google collects information about which tags are integrated by our website as part of the use of the Google Tag Manager. However, the Google Tag Manager does not store any personal data beyond the mere establishment of the connection, in particular no data about usage behavior or the pages visited.

We have concluded an order processing agreement with Google Ireland Limited. In the event that personal data is transferred by Google Ireland Limited to the USA or other third countries, Google Ireland Limited and Google LLC have standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) pursuant to Art. 46 para. 2 lit. c DSGVO concluded.

For more information, see Google’s information on Tag Manager: https://support.google.com/tagmanager/answer/6102821.

3.6.3. Google reCAPTCHA

Our application portal (see section 2.3) uses the Google reCAPTCHA service for job offers, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for persons from the European Economic Area and Switzerland and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”) for all other persons.

reCAPTCHA prevents automated software (so-called bots) from carrying out abusive activities in the job advertisements of the application portal, i.e. it checks whether the entries made actually originate from a human being. For this purpose, reCAPTCHA uses JavaScript and stores cookies and information in local storage on your terminal. In particular, the following data are processed:

3.7.1. Purposes, legal bases, data processed

In order to improve our website, we use optional tools to recognize visitors and to statistically collect and analyze usage behavior based on access data (“analytics tools”). We also use analytics services to evaluate the use of our marketing channels. The usage information collected is aggregated and allows us to track the usage habits of our visitors. This serves to adapt and optimize the design of our website and to make the user experience more pleasant.

The legal basis for the analysis tools is your consent according to Art. 6 para. 1 lit. a GDPR. Access to and storage of information in the terminal device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TTDSG. For revocation of your consent, see section 3.5: “Revocation”.

In the event that personal data is transferred to third countries (such as the USA), your consent expressly extends to the data transfer (Art. 49 (1) a DSGVO). Please refer to section 7 “Data transfer to third countries” for the associated risks.

Data collected may include, in particular:

• the IP address of the end device,
• approximate location,
• the date and time of access,
• pages visited (URL, title, dwell time),
• previously visited page (referrer URL)
• downloaded files,
• clicked links,
• the information of a cookie or in local or session storage,
• the device identifier of mobile devices (e.g. device ID, advertising ID) as well as
• technical information about the terminal device, browser and operating system.

3.7.2. Google Analytics

Our website uses the Google Analytics 4 service (“Google Analytics”), which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for individuals from Europe, the Middle East and Africa (EMEA) and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (collectively “Google”) for all other individuals.

Google Analytics uses JavaScript and pixels to read information on your terminal device and cookies to store information on your terminal device. These are listed individually in our Cookie Policy: https://profiflitzer.de/cookie-richtlinie-eu/.

This is used to analyze your usage behavior and to improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activities for the website operators. The data generated in this context may be transferred by Google to a server in the USA for evaluation and stored there.

As part of the evaluation, Google Analytics 4 also uses artificial intelligence such as machine learning for automated analysis and enrichment of the data. For example, Google Analytics models 4 conversions to the extent that there is not enough data to optimize analysis and reports. For information, please visit: https://support.google.com/analytics/answer/10710245. The data evaluations are carried out automatically with the help of artificial intelligence or on the basis of specific, individually defined criteria. To learn more, visit: https://support.google.com/analytics/answer/9443595.

3.8.1. Purposes, legal bases, data processed

We also use optional tools for advertising purposes (“Marketing Tools”). Some of the access data generated when using our website is used to create usage profiles that store, in particular, your usage behavior, the advertisements you have viewed or clicked on and, based on this, the classification into advertising categories, interests and preferences. By analyzing and evaluating this access data, we are able to present you with personalized advertising, i.e. advertising that corresponds to your actual interests and needs, on our website and on the websites and services of other providers. We also analyze your usage behavior in order to recognize you on other pages and to address you in a personalized manner based on your use of our site (so-called retargeting). In addition, we evaluate the effectiveness and success of our advertising campaigns (especially so-called conversions and leads). However, the data collected is only stored pseudonymously, so that no direct conclusions can be drawn about individuals.

The legal basis for the marketing tools is your consent according to Art. 6 para. 1 lit. a GDPR. Access to and storage of information in the terminal device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TTDSG. For revocation of your consent, see section 3.5: “Revocation”.

We have embedded videos in our website that are stored on YouTube and can be played directly from our websites. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”), which is offered to persons from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to all other persons by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In the process, YouTube may store information such as local storage and session storage on your terminal device and execute JavaScript, which accesses information in your terminal device.

We have activated YouTube’s enhanced privacy mode. As a result, according to YouTube’s own documentation, Google receives less usage information and also does not personalize video recommendations and advertisements. Cookies are no longer stored. However, information will still be stored in the Local Storage and Session Storage of your end device, in particular your device ID and other information regarding the playback of the video, which can be retrieved by Google.

The following information is stored in the Local Storage:

• “yt-remote-device-id”: storage of the device ID;
• “yt-player-headers-readable”: Saves the possibility of reading the player header information;
• “yt.innertube::requests”: storage of the user’s requests;
• “yt.innertube::nextId”: store the ID of the next video;
• “yt-remote-connected-devices”: storage of the connected end devices;
• “yt-player-bandwidth”: store the bandwidth of the connection;
• “yt-player-volume”: save the volume of the video;
• “yt-player-quality”: save the resolution/quality of the video;
• “yt-player-performance-cap”: storage of a possible cap on resolution due to the bandwidth of the connection;
• “yt-html5-player-modules::subtitlesModuleData::module-enabled”: Store whether subtitles are enabled.

The data we collect will only be passed on if there is a legal basis for this under data protection law in the specific case, in particular if:

• You have provided us with your personal data in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO have given express consent to this,
• the disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data disclosed,
• we according to Art. 6 para. 1 p. 1 lit. c DSGVO are legally obliged to disclose, in particular if this is necessary for legal prosecution or enforcement due to official requests, court decisions and legal proceedings, or
• this is legally permissible and in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO is necessary for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.

5.1. Operation of corporate sites

5.1.1. General

We operate company pages on social networks in order to communicate there with customers, interested parties and users, among others, and to provide information about our services.

The users’ data is usually processed by the social networks concerned for market research and advertising purposes. In this way, usage profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the computers of the data subjects. Based on these usage profiles, advertisements are then placed within the social networks, for example, but also on third-party websites.

As part of the operation of our company pages, it is possible that we may access information such as statistics on the use of our company pages provided by the social networks. These statistics are aggregated and may include, in particular, demographic information (e.g. age, gender, region, country) as well as data on interaction with our company pages (e.g. likes, subscription, sharing, viewing of images and videos) and the posts and content distributed via them. These can also provide information about users’ interests and which content and topics are particularly relevant to them. This information may also be used by us to customize the design and optimize our activities and content on the Company Sites for our audience. Please refer to the list below for details and links to the social network data that we, as operators of the company pages, can access. The collection and use of these statistics is usually subject to joint accountability. Where applicable, the relevant contract is listed below.

The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f DSGVO, based on our legitimate interest in effective information and communication with users, or Art. 6 para. 1 lit. b DSGVO to stay in contact with and inform our customers and to carry out pre-contractual measures with interested parties.

If you have an account with the social network, it is possible that we can see your publicly available information and media when we access your profile. In addition, the social network may allow us to contact you. This can be done, for example, via direct messages or via posted articles. The content communication via the social network and the processing of the content data is subject to the responsibility of the social network as messenger and platform service. As soon as we transfer or further process personal data from you into our own systems, we are independently responsible for this and this is done to carry out pre-contractual measures and to fulfill a contract in accordance with Art. 6 para. 1 lit. b GDPR.

For the legal basis of the data processing carried out by the social networks under their own responsibility, please refer to the data protection notices of the respective social network. The links below also provide you with further information on the respective data processing as well as the options to object.

We would like to point out that the most efficient way for you to assert your data protection requests and rights is against the respective provider of the social network. They have access to the data and can implement appropriate measures directly. Of course, you can also contact us with your request. In this case, we will process your request and forward it to the provider of the social network. We are happy to support users in asserting their rights as far as we are able.

Below is a list of information about the social networks on which we operate company pages:

8.1. General

You have the following rights as a data subject:

• Right to information (Art. 15 DSGVO): You have the right to request information about the processing of your personal data by us at any time. In the course of providing information, we will explain the data processing to you and provide you with an overview of the data stored about your person.
• Right to rectification (Art. 16 DSGVO): If data stored by us is incorrect or no longer up to date, you have the right to have this data corrected.
• Right to erasure (Art. 17 DSGVO): You can also request the deletion of your data. If deletion is exceptionally not possible due to other legal regulations, the data will be blocked so that they are only available for this legal purpose.
• Right to restriction of processing (Art. 18 DSGVO): You can also have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect.
• Right to data portability (Art. 20 DSGVO): You also have the right to data portability, which means that we will provide you with a digital copy of the personal data you have provided to us upon request.

To exercise your rights described here, you may contact us at any time using the contact details above. This also applies if you wish to receive copies of guarantees demonstrating an adequate level of data protection. Provided that the respective legal requirements are met, we will comply with your data protection request.

Your inquiries regarding the assertion of data protection rights and our responses to them will be stored for documentation purposes for a period of up to three years and, in individual cases, even longer if there is cause to assert, exercise or defend legal claims. The legal basis is Art. 6 para. 1 lit. f GDPR, based on our interest in defending against any civil claims under Art. 82 GDPR, avoiding fines under Art. 83 GDPR, and fulfilling our accountability obligations under Art. 5(f) GDPR. 2 GDPR.

Finally, you have the right to complain to a data protection supervisory authority (Art. 77 DSGVO). You can exercise this right, for example, before a supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement. In Berlin, the responsible supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.