We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the deconta GmbH website, which can be accessed under the domain www.deconta.com and the various subdomains ("our website").

Who is responsible and how can I contact you?

Person responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

deconta GmbH
Im Geer 20
46419 Isselburg
DE
+49 (0) 28 74 91 56 0
info@deconta.com

Data Protection Officer

AGAD Service GmbH
Waldring 43-47
44789 Bochum
DE
Dr Nils Helmke
helmke@agad.de

What is it about?

This privacy policy fulfils the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to your person, e.g. through anonymisation, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you of the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and in the event of statutory retention obligations.

Who receives my data?

We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In individual cases, we also pass on personal data to third parties if this serves the assertion, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device and stored there when you visit our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programmes or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

• Information in accordance with Art. 15 GDPR about the personal data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
• Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
• erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose the erasure of the data because you need it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
• Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is carried out on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the establishment, exercise or defence of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
• Revocation pursuant to Art. 7 para. 3 GDPR of your consent with effect for the future.
• Complaint to a supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

Processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 para. 1 GDPR. Insofar as further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.

Storage duration

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use. For this purpose, this data is stored for up to 14 days and then deleted.

Contact form

Type and scope of processing

On our website, we offer you the opportunity to contact us using the form provided. The information that is collected via mandatory fields is required in order to process the enquiry. You can also voluntarily provide additional information that you believe is necessary to process the contact enquiry.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

Your data is processed when you use our contact form for the purpose of communicating and processing your enquiry on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Insofar as your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of contract fulfilment on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your enquiry without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage duration

If you use the contact form on the basis of your consent, we store the data collected for each enquiry for a period of three years, beginning with the completion of your enquiry or until you withdraw your consent.

If you use the contact form as part of a contractual relationship, we will store the data collected for each enquiry for a period of three years from the end of the contractual relationship.

YouTube NoCookie

Type and scope of processing

We have integrated YouTube NoCookie on our website. YouTube NoCookie is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet and receive detailed statistics.

YouTube NoCookie enables us to integrate content from the platform into our website.

YouTube NoCookie uses cookies and other browser technologies to evaluate user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube NoCookie can assign the videos played to the profile.

When you access this content, you establish a connection to the servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube NoCookie: https://policies.google.com/privacy.

Matomo

Type and scope of processing

We use the open source software tool Matomo (formerly PIWIK) on our website. The software sets a cookie in your browser (for cookies, see above). If individual pages of our website are accessed, the following data is stored:

• Two bytes of the IP address of the user's accessing system (anonymised IP address)

• The website called up

• The website from which the user accessed the website (referrer)

• The subpages that are accessed from the accessed website

• The time spent on the website

• The frequency of visits to the website

The software runs exclusively on the servers of our website. Your personal data is only stored there. The data will not be passed on to third parties.

Purpose and legal basis

We process your data with the help of the Matomo analysis software for the purpose of analysing the use of individual components and contents of our website on the basis of your consent pursuant to Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG. GDPR and § 25 para. 1 TDDDG.

Storage duration

The actual storage period of the cookies set is 13 months.

 

Data protection information for applicants (GDPR)

Data protection information for applicants

We are pleased that you are interested in us and that you are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with your application.

Who is responsible for data processing?

The controller within the meaning of data protection law is

deconta GmbH
Im Geer 20
46419 Isselburg
DE
+49 (0) 28 74 91 56 0
E-Mail: info(at)deconta.com

Entry in the commercial register.
Register court: Coesfeld Local Court
Register number: HRB 9066

Value added tax identification number in accordance with §27 a of the Value Added Tax Act: DE 813 462 476

You can reach our data protection officer at

AGAD Service GmbH
Waldring 43-47
44789 Bochum
DE
Dr Nils Helmke
helmke@agad.de

You can find further information about our company, details of the authorised representatives and other contact options in the legal notice on our website: 

Which of your data do we process?

And for what purposes? We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process.

What is the legal basis for this?

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG in the version applicable from 25 May 2018. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.

Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion or defence of claims.

How long will the data be stored?

Applicant data will be deleted after 6 months in the event of rejection. In the event that you have consented to your personal data being stored further, we will transfer your data to our applicant pool. There the data will be deleted after two years. If you have been accepted for a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.

To which recipients is the data passed on?

We use a specialised software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner.

Your application data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The next steps are then agreed. Within the company, only those persons have access to your data who need it for the proper conduct of our application process.

Where is the data processed?

The data is processed exclusively in data centres in the Federal Republic of Germany.

Your rights as a "data subject"

You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be. Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so. You also have the right to object to processing within the scope of the statutory provisions. The same applies to the right to data portability.

Right of appeal

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.