In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled under data protection regulations, in particular the European General Data Protection Regulation (GDPR).

This Privacy Notice informs you about the type, scope and purpose of the processing of personal data within our website (hereinafter “website”). The Privacy Notice applies regardless of the domains, platforms and devices used (e.g. desktop, mobile, etc.).

Personal data within the meaning of the GDPR are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. Which data is processed in detail and how it is used depends largely on the services you use with us.

In our Privacy Notice, we use various other terms within the meaning of the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymization, controller, processor, recipient, third party, consent, supervisory authority and international organization. You can find the corresponding definitions for these terms in Art. 4 GDPR.

 

1. Who is responsible for data processing and who can I contact?

The person responsible is:

ABiTEP GmbH
Glienicker Weg 185
12489 Berlin

Phone: +49 (0)30 67057-0
E-Mail: personal@abitep.de

You can reach our Data Protection Officer at:

mip Consult GmbH
Jan Käding
Wilhelm-Kabus-Str. 9
10829 Berlin

Phone: 030 67057-16
E-Mail: datenschutz@abitep.de
www.sofortdatenschutz.de

 

2. What sources and data do we use?

We process personal data that we receive from you as part of the use of our website and, if applicable, our business relationship.

When using the website purely for information purposes, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following access data, which is technically necessary for us to display our website to you and to ensure stability and security. The access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, language and version and type of browser software, notification of successful access.

We also receive your personal data if you contact us, e.g. via the contact form, telephone or e-mail. Personal data in this case is, for example, your name, e-mail address, telephone number and, if applicable, the data that you send us as a message (hereinafter referred to as “contact data”). Depending on the type of request, it may be necessary to provide further data. Please note that when communicating by e-mail, we cannot guarantee complete data security for this transmission method, so we recommend that you send information requiring a high level of confidentiality by post.

 

3. What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Data Protection Act (BDSG) for the following purposes and on the following legal bases:

3.1 Data processing on the basis of your consent

If you have given us your consent to process personal data for specific purposes, in particular to contact you (e.g. via our web forms or by e-mail to process and handle your request), to send newsletters or for the purpose of advertising by telephone, e-mail, SMS (direct advertising), the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Any consent given can be revoked at any time.

Please note that the revocation is only effective for the future. Processing that took place before the revocation is therefore not affected by the revocation. You can revoke your consent at any time by contacting us using the contact details above.

3.2 Data processing for the implementation of pre-contractual measures at the request of the person

When you contact us (e.g. via web form, telephone or e-mail), your details will be processed to process the contact request and its handling, Art. 6 para. 1 sentence 1 lit. b GDPR.

3.3 Data processing for the fulfillment of legal obligations

Insofar as the processing of your personal data is necessary to fulfill a legal obligation to which we are subject, the data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. c GDPR.

3.4 Processing to protect our legitimate interests or those of third parties

We may process your personal data to protect our legitimate interests or those of third parties. We pursue the following legitimate interests in particular:

• Ensuring IT security, in particular the security of the website;
• Improvement of the website in terms of structure and content;
• Assertion of legal claims and defense in legal disputes;

 

3.5 Realization of the job application procedure

When you contact us (via contact form or email) in connection with your application, we process your data in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process, Art. 6 para. 1 sentence 1 lit. b GDPR. Your applicant data will be reviewed by the HR department after receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. They will then decide on the next steps. Within the company, only those persons have access to your data who need it for the proper conduct of our application process.

For data processing that is not absolutely necessary for the application process, we obtain your consent, Art. 6 para. 1 sentence 1 lit. a GDPR.

3.6 Storage of data on your end device or access to data stored on your end device

We use cookies and similar technologies in the website. We store information on your end device if this is absolutely necessary in order to make our website available to you, Section 25 para. 2 No. 2 TDDDG. Data processing is carried out to safeguard our legitimate interest in the best possible functionality of the website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Further information on the use of cookies and similar technologies can be found under “Cookies and similar technologies”.

 

4. Who receives my data?

Within our company, those departments that require your data to fulfill our contractual and legal obligations will have access to it.

Processors used by us (Art. 28 GDPR) may also receive data for the above-mentioned purposes. These are companies in the categories of IT services, logistics, telecommunications, debt collection, advice and consulting as well as sales and marketing. If we pass on data to our service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have suitable technical and organizational measures in place to protect the rights of the data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.

Data will only be passed on to third parties who are not processors within the framework of the legal requirements. We only pass on user data to third parties if this is necessary, e.g. on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR for contractual purposes or on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in the economic and effective operation of our business operations or if you have consented to the transfer of data. When using the website for purely informational purposes, we do not pass on any data to third parties.

 

5. How long will my data be stored?

5.1 Access data

For security reasons (e.g. to clarify acts of abuse or fraud), log file information is stored for a maximum period of fourteen days and then deleted (see point 2 above). Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

5.2 (Pre-)contractual measures

Where necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation of a contract via the contact form or by e-mail.

5.3 Applicant data

Applicant data will be deleted after 6 months in the event of a rejection. If we fill the advertised position with you, your data will be stored in our personnel management system.

5.4 Statutory retention obligations

In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are six to ten years.

5.5 Limitation periods

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years, whereby the regular limitation period is three years.

If you assert your rights as a data subject, we will store the information provided to you in this regard until expiry of the statutory limitation period in accordance with Section 31 para. 2 No. 1 OWiG, Section 41 para. 1 BDSG, Art. 83 para. 5 lit. b GDPR for 3 years. This period may be extended if the statutory limitation period is extended due to interruptions of the limitation period (e.g. in the context of inquiries by the supervisory authorities).

 

6. Is data transferred to a third country or to an international organization?

The data provided will be processed within the European Union (“EU”) and the European Economic Area (“EEA”), specifically Switzerland. In the case of data transfer outside the EU, we ensure that an adequacy decision of the European Commission exists for the respective recipient country.

 

7. What data protection rights do I have?

Every data subject has

• the right to information in accordance with Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time),
• the right to rectification in accordance with Art. 16 GDPR (i.e. if your personal data is incorrect or incomplete, you can request the rectification of this data),
• the right to erasure pursuant to Art. 17 GDPR and the right to restriction of processing pursuant to Art. 18 GDPR (i.e. you may have the right to request the erasure or restriction of processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and statutory retention obligations do not require further storage),
• the right to data portability under Art. 20 GDPR (i.e. you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance).

Furthermore, you can revoke your consent with effect for the future.