Privacy Policy Statement

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. In the following we wish to provide you with information on how we handle your personal data when you use our Website. Unless otherwise indicated in the following chapters, the legal basis for the handling of your personal data results from the fact that such handling is required to make available the functionalities of the Website requested by you (Art. 6(1)(b) General Data Protection Regulation).

We take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy. If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us. We know that protecting your private sphere when using our website is an important concern. We take our duty to ensure that your data remains confidential very seriously, and we comply with the applicable provisions governing data protection law. We use suitable technology to conduct a dialogue with you and to safeguard your data.

The party responsible for processing data on this website is:

valantic DXA GmbH 
Birketweg 21
80639 Munich
Germany

With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter "data").

1.     RESPONSIBLE FOR DATA PROCESSING

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

valantic DXA GmbH 
Birketweg 21
80639 Munich
Germany
Tel.: 089.6228625.0
Web: www.dxa.valantic.com
E-Mail: privacy[at]dxa.valantic.com

2.     CONTACT DETAILS OF OUR DATA PROTECTION OFFICER

RMPrivacy GmbH
Matthias Rosa
Große Langgasse 1A
55116 Mainz
Deutschland
E-Mail: privacy[at]dxa.valantic.com

3.     GENERAL INFORMATION ON DATA PROCESSING

In the course of our business and website operations, we process data.
This also includes disclosure by transmission to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.

4.     DATA PROCESSING

The individual data, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

a)    Log file during website visit

We log your website visit. In doing so, we process:

• Name(s) of our accessed website(s),
• date and time of the retrieval,
• the amount of data transferred,
• the browser type and version,
• the operating system you are using,
• the referrer URL (the previously visited website),
• your IP address,
• the requesting provider.

The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website in accordance with Art. 6 (1) f) GDPR.
The log file is deleted after fourteen days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.

b)    Hosting

To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 (1) f) GDPR.

c)    Contacting us

If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details -if provided by you- and your message.
The legal basis for the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.

d)   Contacting us for applications

If you contact us to send us your application as an employee:in, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired location, etc.), your message and the application documents submitted will be processed solely for the purpose of processing and handling your application request.
In order to offer you a fast and effective way of applying, we use the service Personio of Personio GmbH, Rundfunkplatz 4, 80335 Munich. The data is stored on an AWS server in Germany.
The legal basis for data processing is primarily § 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests pursuant to Art. 6 (1) f) GDPR, namely for the assertion and/or defense of claims.

e)    Contract fulfillment and data management in the context of service provision

In the course of providing our services and for the purpose of initiating and managing the existing contractual relationship between you and us, we process various data.
If you have commissioned us to provide a service, we process your data (if provided: name, contact details, address) and all information required in the course of fulfilling the contract exclusively for the purpose of processing and handling the contractual relationship.
This includes in particular our appropriate advice and support, correspondence with you, invoicing, fulfillment of our accounting and tax obligations.
Accordingly, the data is processed on the basis of Art. 6 (1) b) GDPR and to fulfill our legal obligations under Art. 6 (1) c) GDPR.
If this is necessary for the processing of the order, your data will be passed on to third parties.
This includes in particular the disclosure to supervisory authorities for the purpose of correspondence as well as for the assertion and defense of your rights.
In this regard, we take all appropriate measures to only transfer personal data to the extent necessary for the underlying purpose.

f)     Newsletter

In order to provide you with regular information about our company and offers, we offer the dispatch of an e-mail newsletter. With your newsletter registration, we process the data you entered during registration (e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration is logged. This concerns the time of registration and confirmation as well as your IP address.
For sending the newsletter, we use the service CleverReach, to which we transmit the aforementioned data. CleverReach is a service of Cleverreach GmbH und Co KG, Schafjückenweg 2, 26180 Rastede.
The legal basis for sending the newsletter is your consent in accordance with Art. 6 (1) a) GDPR. The data processing in connection with the sending of the confirmation e-mail for your registration and the associated data logging is carried out in accordance with Art. 6 para.1 f) GDPR
If you give us consent, we also evaluate in the newsletters whether you have opened the newsletter as well as the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 (1) a) GDPR.

g)    Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
Information about the specific cookies we use, their providers and purposes can be found in our Consent banner. There you give your consent to the respective services, can revoke them or adjust your settings subsequently.

Our Consent Banner

In order to document your choice regarding certain data processing procedures and to fulfill our obligations under data protection law, we use a consent banner from Usercentrics. Usercentrics is a service of Usercentrics GmbH, Sendlinger Straße 7,80331 Munich.
When you call up our website, your cookie preferences are requested via a banner. We then set a cookie in which data on consent given or revoked is stored. The data processing is carried out for the fulfillment of our legal obligations according to Art 6 para. 1 c) GDPR.

h)    Analysis / Marketing

aa)  AWStats and Report Magic

For statistical analysis of visitor access to our website, we use the statistical programs AWStats and Report Magic.
The statistical analysis is carried out on the basis of log files that have already been anonymized. A personal reference cannot be established. No cookies are used.
The following data is processed from the log files: the website accessed, the date and time of the server request, the volume of data transferred, the number of visits, your country of origin, the time spent on the website, the browser type and version, the operating system you are using, the referrer URL (the website visited previously) and your anonymized IP address.
Both programs work exclusively via our own web server, there is no data transmission to third parties.
The data processing is based on our overriding interest in the optimal marketing of our online offer according to Art. 6 para. 1 f) GDPR

bb) Google Services

We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") on our website. It is possible that this may also result in data transfers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA. Google is certified under the EU-US Data Privacy Framework and is covered by the EU adequacy decision for the US.

Google Analytics

We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services related to the use of the website and thus to improve the user experience.
When Google Analytics is used, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
We use Google Analytics with the extension "anonymizeIp()". This shortens IP addresses within the member states of the EU or EEA. If a transmission to Google's servers in the USA takes place, the full IP address is only transmitted in exceptional cases and shortened there. A direct reference to a person is therefore generally excluded. In particular, an assignment to the called computer or terminal of the website visitor is no longer possible.
Google states that it will not associate your IP address with any other data held by Google.

Google Remarketing/Retargeting

We use so-called tracking cookies from Google on our website. When you visit our site, information is stored in permanent cookies about which products you have viewed on our site and through which ads and third-party sites users reach our website. During a subsequent visit to a partner website, we can have personalized advertising displayed for you based on the items viewed with us.

Google Ads

We use Google Ads, an online advertising program from Google, on our website. Here, so-called conversion tracking is operated. If you click on an ad placed by Google, a cookie is set. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
The data collected using the conversion cookie is used to generate statistics for Ads customers who have opted in to conversion tracking.

Legal basis and withdrawal

The legal basis for data processing within the scope of the aforementioned Google services is your prior consent pursuant to Art. 6 (1) a) GDPR.
You can revoke your consent at any time with effect for the future by adjusting your preferences in our Consent Banner.

cc)  Facebook Conversion API

We use the tracking tool Facebook Conversion API of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. 1601, Willow Road Menlo Park, CA 94025, USA.
This is a data interface through which we transmit data about your behavior on our website to Facebook for evaluation. This allows us to show you advertisements that match your user behavior on our website.
We transmit the data to Facebook. In the process, the data is also transmitted to Facebook in the USA.
Facebook is certified under the EU-US Data Privacy Framework and to this extent falls under the EU adequacy decision for the US.
The legal basis for data processing is your consent in accordance with Art. 6 (1) a) GDPR.
You can revoke your consent for data processing by Facebook Pixel for our web domain at any time with future effect by adjusting your preferences in our Consent Banner.

dd) LinkedIn Insight Tags

We use the LinkedIn Insight Tags service on our website for analysis, retargeting and marketing purposes. This is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").
It is possible that, within the scope of LinkedIn Insight Tags, data will be forwarded to the LinkedIn Corporation based in the USA and processed there. For data transfers to the USA, Pinterest ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided upon request. For this purpose, please contact privacy[at]dxa.valantic.com.
You can revoke your consent for data processing by LinkedIn for our web domain at any time with future effect by adjusting your preferences in our Consent Banner.
The legal basis for the data processing is your consent according to Art. 6 para. 1 a) GDPR.

ee)  Pinterest Insights

We use the Pinterest Insights service on our website for analysis, retargeting and marketing purposes. This is a service Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
It is possible that, within the scope of LinkedIn Insight Tags, data will be forwarded to the LinkedIn Corporation based in the USA and processed there. For data transfers to the USA, LinkedIn ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided upon request. For this purpose, please contact privacy[at]dxa.valantic.com.
You can revoke your consent for data processing by Pinterest for our web domain at any time with future effect by adjusting your preferences in our Consent Banner.
The legal basis for the data processing is your consent according to Art. 6 para. 1 a) GDPR.

ff)    Webalyzer

We use the Webalyzer service on our website for analysis, retargeting and marketing purposes. Here, overviews of the number of hits, file/page requests, visits, etc. are generated based on the data of the server log files. There is no data transfer outside the EU.
The data processing is based on our overriding interest in the optimal marketing of our online offer according to Art. 6 para. 1 f) GDPR.

gg) Hotjar

We use the service Hotjar on our website for analysis, retargeting and marketing purposes. Hotjar is a service of Hotjar Ltd Dragonara Business Centre, 5th Floor, Dragonara Road,Paceville St Julian's STJ 3141, Malta.
Hotjar works with cookies and other technologies to collect data about the behavior of our users and about their terminal devices, in particular IP address of the device in anonymized form, screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. 
The legal basis for the data processing is your consent according to Art. 6 para. 1 a) GDPR.

5.     DURATION OF DATA RETENTION

We store personal data only as long as it is necessary for the purposes for which it is processed or if you have revoked your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.

6.     YOUR RIGHTS AS A DATA SUBJECT

a)    Information

Upon request, you will receive information free of charge at any time about all personal data that we have stored about you.

b)    Correction, deletion, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have a right of objection in particular in cases where your data is required due to the performance of a task that is in the public interest or the data processing is based on our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.

c)    Right of revocation for consents with effect for the future

You can revoke consents granted at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.

d)    Data portability

If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party upon request.

e)    Restriction of processing

Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.

f)     Exercise of your data subject rights and right of appeal

If you have any questions about the processing of your personal data, or if you wish to request information, correction, blocking, objection or deletion of data, or if you wish to transfer your data to another company, please contact us at privacy[at]dxa.valantic.com.
You also have the possibility to complain to a supervisory authority about your data protection rights.

Cookies and Opt-Out

a)    Current status of your consent

b)    Cookie-Banner Services