Privacy statement

The protection of your personal data during collection, processing and use on the occasion of your visit to our homepage is an important concern to us. Below you will find information on which personal data we process for which purpose, on which basis and for how long:

Name and contact data of the responsible person:

Responsible in the sense of data protection law for the collection and use of personal data is

RunningHR
Thomas Kroell
Hohemarkstr. 37
64162 Koenigstein / Germany
Phone: +49 (0) 6174 2034248
E-mail: contact(at)runninghr.com

 

Further information about our company can be found in the imprint of our homepage https://runninghr.com.

1. General information on the processing of personal data by us

General legal basis for the processing of personal data In principle, the following applies to the processing of personal data by us:

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 letter a) of the EU Basic Data Protection Regulation (DSGVO) serves as the legal basis for the processing of personal data.

Art. 6 (1) (b) DSGVO serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 letter c) DSGVO serves as the legal basis. Art. 6 (1) (d) DSGVO serves as the legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) DSGVO serves as the legal basis for the processing.

Data deletion and storage period Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which we are subject as responsible. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.

Specifically, that means:

If we process your personal data on the basis of your consent to data processing (Art. 6 Para. 1 Letter a) of the German Data Protection Ordinance, or DSGVO for short), the processing ends with your revocation, unless there is another legal reason for processing the data, which is the case if at the time of revocation we are still entitled to process your data for the purpose of fulfilling the contract or if data processing is necessary to safeguard our legitimate interests (see below in each case).

If, exceptionally, we process the data on the basis of our legitimate interests (Art. 6 Para. 1 Letter f) DSGVO) within the framework of a previously carried out weighing, we will save this until the legitimate interest no longer exists, the weighing comes to a different conclusion or you have effectively lodged an objection pursuant to Art. 21 DSGVO (cf. the optically highlighted „Reference to special right of objection“ below).

If we process the data to process the contract, for example because you have placed an order with us, we will store the data until the contract has been finally fulfilled and processed and no further claims can be asserted under the contract, i.e. until the statute of limitations applies. The general limitation period according to § 195 BGB is three (3) years. However, certain claims, such as claims for damages, do not become statute-barred until 30 years have elapsed. If there is justified reason to assume that this is relevant in individual cases, we will store the personal data for this period. The limitation periods mentioned begin at the end of the year (i.e. on 31.12.) in which the claim arose, and the creditor becomes aware of the circumstances giving rise to the claim and of the person of the debtor or should have become aware of them without gross negligence.

We would like to point out that we are also subject to statutory storage obligations for tax and accounting reasons. These obligate us to retain certain data, which may also include personal data, for a period of six (6) to ten (10) years as proof of our accounting records. These retention periods take precedence over the above-mentioned deletion obligations. The retention periods also begin at the end of the respective year, i.e. on 31.12. of each year.

Source of personal data

The personal data processed by us originates primarily from the data subjects themselves, for example by

as a user of our website, transmit information, such as the IP address, to our web server via the web browser and the user’s technical system, as an interested party, request information material or an offer from us,

as a customer place an order with us or conclude a contract with us, as a supplier, supply us with goods as agreed or provide us with services or the like. The personal data processed by us may originate from third parties only in very exceptional cases, for example if a person acts on behalf of a third party.

Specific categories, purposes and legal bases for the processing of personal data

We process the following categories of personal data:

• users of our website,
• interested parties,
• customers, and

Depending on the category of data involved, we process personal data for the following purposes and on the basis of the respective legal basis of the Data Protection Ordinance (DSGVO):

User data:

Data from users of our website is collected and processed by us on a non-personal basis. An assignment to certain persons is impossible. The IP address is only processed anonymously. If, in exceptional cases, personal data is involved, we process it to safeguard our legitimate interests on the basis of Art. 6 Para. 1 Letter f) DSGVO. Our legitimate interests in this sense are: Interest in the security and integrity of our web presence and the data on our web server (in particular fault and error detection and tracking of unauthorised access), interest in marketing and interest in statistical surveys to improve our web presence and our services. In the course of a weighing we have come to the conclusion that data processing is necessary to safeguard the aforementioned legitimate interests and that your interests or fundamental rights and freedoms, which require the protection of personal data, do not prevail.

Data of interested parties/data of press representatives:

As far as we process data of prospective customers of our services, this only happens if you enter this data in an input field or by e-mail for the purpose of the inquiry and send it to us. These entries are voluntary for you. We will then process these data exclusively for the purpose of processing your enquiry to us. The processing of this data voluntarily transmitted to us for the purpose of providing information about our services takes place as a pre-contractual transaction pursuant to Art. 6 Para. 1 Letter b) DSGVO and, in addition, on the basis of the consent you have given by transmission pursuant to Art. 6 Para. 1 Letter a) DSGVO.

Customer data:

We process the data of our customers for the purpose of processing the contract pursuant to Art. 6 Para. 1 Letter b) DSGVO and/or on the basis of consent granted pursuant to Art. 6 Para. 1 Letter a) DSGVO. This also applies to processing operations which are necessary for the implementation of pre-contractual measures (e.g. within the framework of the preparation and negotiation of offers).

Supplier data

We process the data of our suppliers and business partners for the purpose of processing the contract pursuant to Art. 6 Para. 1 Letter b) DSGVO and/or on the basis of consent granted pursuant to Art. 6 Para. 1 Letter a) DSGVO. This also applies to processing operations which are necessary for the implementation of pre-contractual measures (e.g. within the framework of the preparation and negotiation of offers).

Recipients or categories of recipients of personal data

Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of processing the contract (e.g. processing an order or an order) or for billing purposes (e.g. processing the payment process when purchasing goods or services) or if you have given your prior effective consent.

Categories of recipients can therefore be:

• Shipping service providers, suppliers,
• payment service providers, banks

2. Scope of the processing of personal data on the website

We collect and use personal data of the users in the context of the use of our website only as far as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of personal data of our users generally only takes place with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and/or the processing of the data is permitted by statutory provisions.

Provision of the website and creation of log files

For technical reasons, our system automatically collects data and information each time the website is accessed. These are stored in the log files of the server. These are:

• date and time of access,
• URL (address) of the referring website (referrer),
• web pages that are accessed by the user’s system via our website,
• web pages that are accessed by the user’s system via our website,
• retrieved file(s), amount of data sent,
• the Internet service provider of the user,
• browser, browser type and browser version, browser engine, and browser engine version,
• operating system, operating system version, operating system type,
• and the IP address and Internet service provider of the user.

This data is processed separately from other data. These data are not processed together with other personal data of the user. It is not possible for us to assign this data to a specific person.

Purposes of data processing:

The temporary processing of the data by the system is necessary to enable delivery of the contents of our website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data serve us to optimize our offer and the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Legal basis for data processing:

The temporary storage of data and log files is based on the legal basis of Art. 6 Para. 1 Letter f) DSGVO. Our predominant legitimate interest in this data processing lies in the aforementioned purposes. Purpose of the data processing:
The purpose of using technically necessary cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change. The user data collected by technically necessary cookies are not used to create user profiles. Analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to continually optimize our services.

Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 letter f) DSGVO, i.e. a predominantly legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage, possibility of objection and removal:

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (permanent cookies). Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Such a „do-not-track“ setting of your browser is understood by us as a contradiction to the further collection and use of your personal data. Note: If cookies are deactivated for our website, it is possible that not all functions of the website can be used to the full extent.

Use of the analysis tool Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). Google Analytics uses „cookies“, which are text files placed on your computer, to help the website analyze how users use the site.

We would like to point out that on this website Google Analytics has been extended by the code „anonymizeIp“ in order to guarantee an anonymous recording of IP addresses (so-called IP masking). By activating IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.htmland https://www.google.de/intl/de/policies/respectively.

Purpose of data processing

The analysis tool or analysis cookies are used for the purpose of improving the quality of our website and its content. In this way, we learn how the website is used and can therefore constantly optimize our services. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) DSGVO, which is a predominantly legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. The company Google Inc. has joined the „EU-US-Privacy Shield“, so that the transfer of data to the USA is permitted.

Duration of storage:

The cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. This can also be done automatically. Such a „do-not-track“ setting of your browser is understood by us as a contradiction to the further collection and use of your personal data. Note: If cookies are deactivated for our website, it is possible that not all functions of the website can be used to the full extent.

Possibility of objection and removal:

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by clicking on the following link

(http://tools.google.com/dlpage/gaoptout?hl=en) to download and install the available browser plugin. You can prevent Google Analytics from capturing your data by clicking on the following link. An opt-out cookie is set to prevent your data from being collected in the future when you visit this website.

Privacy policy for the use of Xing

The „XING Share Button“ is used on this website. When you access this website, your browser establishes a short-term connection to servers of XING SE („XING“) that provide the „XING Share Button“ functions (in particular the calculation/display of the meter value). XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. Nor does XING evaluate your usage behavior through the use of cookies in connection with the „XING Share“ button. You can access the latest data protection information on the „XING Share Button“ and additional information on this website: https://www.xing.com/app/share?op=data_protection

LinkedIn

The functions and content of the LinkedIn service offered by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland can be integrated into our online offer. This may include, for example, content such as images, videos or text and buttons with which users can share content from this online service within LinkedIn. If the users are members of the platform LinkedIn, LinkedIn can assign the call of the above-mentioned contents and functions to the profiles of the users there.

Privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy

LinkedIn is certified under the Privacy Shield Agreement, thereby providing a guarantee of compliance with European data protection law. https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). 

Website Encryption

The website and thus the data transmissions via it are encrypted according to the SSL standard using the https protocol.

Transfer of personal data to a third country (EU foreign country)

The intention is to transmit personal data to the United States of America (USA). There is an adequacy decision of the EU Commission which states that personal data may be transferred to the US if the recipient has joined the EU-U.S. Privacy Shield. The personal data will therefore only be transferred to recipients in the US who can prove that they have acceded to the EU-US Privacy Shield.

The intention refers specifically to a data transfer to the following companies

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). as provider of the web analysis tool Google Analytics. The aforementioned companies have joined the EU-U.S. Privacy Shield and have subjected themselves to a regulation comparable to the EU data protection level. Data transmission to these companies is therefore generally permitted. Moreover, in the case of order processing with these companies, corresponding order processing contracts have been concluded to secure the data and our rights to issue instructions.

3. Affected rights
   

If personal data is processed by you, you are „affected“ and you have the following rights against us as responsible:

Right to information

You have the right to receive confirmation from us free of charge as to whether we are processing personal data concerning you. If this is the case, then you have the right to information about this personal data and to further information, which you can find in Art. 15 DSGVO. You can contact us by post or e-mail.

Right to correction

You have the right to demand from us immediately the correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration – taking into account the aforementioned processing purposes. You can contact us by post or e-mail.

Right to deletion

You have the right to demand the immediate deletion of the personal data concerning you if one of the requirements of Art. 17 DSGVO is met. You can contact us by post or e-mail.

Right to limitation of processing

You have the right to demand that we restrict processing if one of the requirements of Art. 18 DSGVO applies. You can contact us by post or e-mail.

Right to information

If you have exercised your right to rectify, cancel or limit the processing of your personal data against the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed of such rectification, cancellation or limitation, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of such recipients by the data controller.

Right to data transfer

You have the right to receive the personal data concerning you which you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another responsible person without any hindrance on our part if the requirements of Art. 20 DSGVO are met. You can contact us by post or e-mail.

Right of objection in the event of processing because of our legitimate interest

If we exceptionally process personal data on the basis of Art. 6 Para. 1 Letter f) DSGVO (i.e. because of legitimate interests), you have the right to object to the processing of your personal data by us at any time for reasons arising from your particular situation. If we cannot prove any compelling reasons worthy of protection for further processing which outweigh your interests, rights and freedoms, or if we process the relevant data from you for the purpose of direct marketing, we will no longer process your data (cf. Art. 21 DSGVO). You can contact us by post or e-mail. A technical procedure that you use, e.g. clear technical information that your web browser transmits to us („Do-Not-Track“ message), also counts as a contradiction in this sense.

Right of revocation with given consent

You have the right to revoke your consent to the collection and use of personal data at any time with effect for the future. You can contact us by post or e-mail. This does not affect the legality of the processing carried out on the basis of the consent until revocation.

Automated decision-making including profiling

You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. Unless the decision is necessary for the conclusion or performance of a contract between you and us, it is permissible by law of the Union or of the Member States to which we are subject, and such law contains reasonable measures to protect your rights and freedoms and your legitimate interests, or the decision is made with your express consent. Such automated decision making does not take place through us.

Voluntary provision of data

If the provision of personal data is required by law or contract, we will always point this out when collecting the data. In some cases, the data collected by us is necessary for the conclusion of a contract, i.e. if we could otherwise not fulfil our contractual obligation towards you or could not fulfil it sufficiently. There is no obligation for you to provide personal data. However, the non-availability can lead to the fact that we cannot carry out or offer a service, action, measure or similar desired by you or that a conclusion of a contract with you is not possible.

Right of appeal to a supervisory authority

Without prejudice to any other rights, you have the right at any time to complain to a data protection supervisory authority, in particular in the Member State in which you reside, your place of work or the place where the alleged infringement occurred, if you consider that the processing of your personal data is in breach of data protection law.

This is a translation of the German version which is legally binding.