Privacy policy

Name and contact details of the responsible entity

netcare Business Solutions GmbH
Lichtäcker 1
72149 Neustetten
Germany

Phone: +49 7472 9677-0
E-mail: info@netcare.de

Contact details of the data protection officer

Confidential/Personal
Data Protection Officer
netcare Business Solutions GmbH
Lichtäcker 1
72149 Neustetten
Germany

E-mail: data-protection@netcare.de

Data processing when you visit our website

In the case of merely informational use of the website, i.e., if you do not otherwise transmit information to us (e.g., via a contact form), we collect the following technical information (log file data):

• Name of the retrieved file
• Date and time of retrieval
• Transferred data volume
• Message as to whether the call was successful
• Description of the type of web browser used
• Used operating system
• The previously visited page
• Providers
• Your IP address

The collection of this data is technically necessary to display our website to you and to ensure stability and security. We (and our service provider) are unaware of who is behind an IP address. Neither do we combine any of the data listed above with any other data.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.

Other data processing

The processing of personal data may be based on various legal grounds. If we need your data to fulfil a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b GDPR. If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, whereby a balancing of your interests worthy of protection and our legitimate interests is always carried out. The legal basis here is Art. 6 para. 1 p. 1 lit. f GDPR. Insofar as processing is necessary for the fulfilment of a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 p. 1 lit. c GDPR.

a. Contact

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and first name and your message) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR.

Insofar as we request input via our contact form that is not required for contacting you, we have always marked this as optional. This information serves us to specify your request and to improve the processing of your request. A communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as this involves information on communication channels (for example, e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request. You can, of course, revoke this consent at any time for the future.

Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the data controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions are prone to security breaches. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels such as our contact form or the postal service for this purpose.

b. Newsletter

General information

You can subscribe to our newsletter on our website, with which we inform you about the activities of our company, current information about our services and events. The content of the newsletter is briefly described within the scope of the registration. The legal basis for sending the newsletter is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with. § 7 para. 2 no. 3 UWG or the legal permission according to § 7 para. 3 UWG.

For the registration to our newsletter, we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after 3 days.

Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary: this data is used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter and until revoked. We also store your IP address current at the time of registration, the time of registration and confirmation for up to three years after registration (statute of limitations). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for logging the registration is our legitimate interest according to Art. 6 para. 1 p. 1 lit. f GDPR in the proof of a formerly given consent, see also Art. 7 para. 1 GDPR.

You can revoke your consent to your inclusion in the mailing list for the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email or by sending an email to data-protection@netcare.de.

Newsletter Tracking

We would like to point out that we evaluate your user behavior when sending the newsletter in order to determine whether and when the newsletter was opened. For this evaluation, the emails contain so-called web beacons or tracking pixels that are stored on our server and loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address are transmitted. For evaluations, we link the aforementioned data and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID and allow us to analyze your click behavior.

With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them and infer your personal interests from this. We link this data to actions you have taken on our website. The legal basis for this data processing is your consent, Art. 6 para. 1 p.1 lit. a GDPR.

You can revoke your consent at any time with effect for the future. In this case, the revocation includes the entire newsletter, as a separate revocation of tracking is unfortunately not technically possible. To do so, simply click the unsubscribe link provided in each email.

Moreover, such tracking is not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be fully displayed to you and you may not be able to use all of its features. If you display the images manually, the tracking mentioned above will take place.

The information from the tracking is stored as long as you are subscribed to the newsletter. After unsubscribing, the data is anonymized and used for purely statistical purposes.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

c. Applications

You can apply to our company electronically, e.g. via e-mail or web form. Please note that unencrypted e-mails will not be transmitted without access protection.

Your details will be used for processing your application and deciding whether to establish an employment relationship. The legal basis is § 26 para. 1 in conjunction with para. 8 p. 2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with § 26 para. 1 BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of the interests of employees resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

Your application data will not be processed beyond the described use.

Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us your consent for longer storage. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

We will store your data for a further 24 months after completion of the application process if you agree to be included in our "netcare talent pool" by ticking the checkbox when you send in your application via Personio. If you tick the checkbox, you consent to the further storage of your data and to being contacted for the purpose of submitting further interesting positions in our company. If you apply by e-mail, we will ask you whether you consent to being included in the "netcare talent pool" as part of our notification of rejection. The legal basis for inclusion in the talent pool, storage and contact within the framework of the talent pool is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR. Your consent is voluntary, you can revoke it at any time with effect for the future.

The data transmitted as part of your application will be transferred via TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software. Personio is our order processor in this context according to Art. 28 GDPR. We have concluded an order processing agreement with Personio in accordance with Art. 28 GDPR.

Cookies

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, that you have to re-enter required form data each time you use the site. The information stored in cookies can also be used to recognize preferences and to tailor content according to areas of interest.

There are different types of cookies: session cookies are sets of data that are only temporarily held in memory and deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. For example, these cookies are used by marketing companies.

The legal basis for possible processing of personal data using cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, for range measurement.

The cookies used on this website are:

You can delete cookies already stored on your device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your internet browser. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.

When calling up our website, all users of our website are also informed by an info banner about our use of cookies and referred to this data protection notice. As a user, you will also be asked for your consent to the use of certain cookies, in particular for the personalization of services and for marketing measures. Once you have given your consent, you can revoke it at any time with effect for the future by calling up the cookie administration via the following link and unchecking the box next to the processing to which you had consented: Cookie-Settings.

Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by means of the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your website visit, your user behavior is recorded in the form of "events". Events can be:

• page views
• first visit to the website
• start of session
• your "click path", interaction with the website
• scrolls (whenever a user scrolls to the end of the page (90%))
• clicks on external links
• internal search queries
• interaction with videos
• seen / clicked ads

Also recorded:

• your approximate location (region)
• your IP address (in shortened form)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• your internet service provider
• the referrer URL (via which website/ via which advertising medium you came to this website)

Purposes of the processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.

Recipients

Recipients of the data are/may be.

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 GDPR).
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

Third country transfer

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Storage period

The data sent by us and linked to cookies are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Legal basis

The legal basis for this data processing is your consent pursuant to Art.6 para. 1 p. 1 lit. a GDPR.

Revocation

You can revoke your consent at any time with effect for the future by accessing the cookie settings HERE and changing your selection there. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.

Alternatively, you can prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by

• Not giving your consent to the setting of the cookie or
• downloading and installing the browser add-on to disable Google Analytics HERE.

For more information on the terms of use of Google Analytics and data protection at Google, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

Comment Function on individual websites

When using the comment function on our websites (e.g. our blogs), personal data is processed. These are:

• Your comment
• Information about the time the comment was created
• Your e-mail address (not publicly visible)
• Your chosen username (optional)
• Your IP address (not publicly visible)

The legal basis for the processing of your comment, the time, the e-mail address and your username is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. This is voluntary and you can revoke it at any time with effect for the future. For this purpose, an informal communication by e-mail to data-protection@netcare.de is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Since we do not check comments on our site before they are activated, we need your IP address in order to be able to take action against the author in the event of legal violations such as insults or propaganda. The legal basis is therefore our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f GDPR in effective legal protection.

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments) or you revoke your consent.

Google reCAPTCHA

We use reCaptcha v2 on our websites. reCaptcha is a service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

ReCaptcha serves to prevent abusive automated entries in web forms and thus to protect the technical systems of the hoster.

When you call up one of our web pages in which reCaptcha is integrated, a connection is established to Google's servers. A reCaptcha cookie is set. Your IP address is transmitted to Google.

In addition, reCaptcha collects the following data by means of "fingerprinting":

• browser plugins used
• cookies set by Google in the last 6 months
• number of mouse clicks and touches you have made on this screen
• CSS information for the page you are viewing
• Javascript objects
• the date
• the browser language

You may refuse the use of cookies and fingerprinting by selecting the appropriate technical settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

The collection and storage of data only takes place after explicit, voluntary consent according to Art. 6 para. 1 p. 1 lit. a GDPR. This can be revoked at any time with effect for the future.

Insofar as data is processed outside the European Economic Area / the EU, where there is no level of data protection corresponding to the European standard, Google uses standard contractual clauses according to its own information.

The privacy policy and terms of use of Google can be found here: https://policies.google.com/privacy and here: https://policies.google.com/terms.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

Duration of Storage

Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations.

If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. That is, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

Data subject rights

We will gladly provide you with information as to whether personal data relating to you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal conditions.

You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e or f; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of your person, or the processing serves to assert, exercise or defend legal claims.

If personal data are processed for the purposes of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

To exercise your data subject rights, please send an email to data-protection@netcare.de. The exercise of your above rights is free of charge for you, transmission costs according to the prime rate of your provider may apply.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 GDPR).

The responsible supervisory authority responsible is:

Der Landesbeauftragte
für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstrasse 20
70173 Stuttgart

Our data protection officer

If you have any questions about data protection, please contact our data protection officer at data-protection@netcare.de.