Information on the collection of personal data
a) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
b) The person responsible pursuant to Art. 4 (7) of the EU General Data Protection Regulation (hereinafter "GDPR") is
Stylers made to measure GmbH
Lahnstrasse 10
D-35232 Dautphetal
Germany
Phone +49 6466 34198 0
Fax +49 6466 34198 50
info@stylersmtm.eu
You can reach our data protection officer at:
gds - Gesellschaft für Datenschutz Mittelhessen mbH
Auf der Appeling 8
35043 Marburg
06421 / 804 13-10
datenschutz@gdsm.de
c) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
Contact by e-mail
a) When you contact us by e-mail, the data you provide and the resulting personal data (e.g. name, enquiry, e-mail address, telephone number) are stored by us for the purpose of processing your enquiry and in the event of follow-up questions. We do not pass this data on to third parties without your consent.
b) The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
c) The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested.
Collection of personal data when visiting our website
a) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security on the basis of Art. 6 (1) lit. f GDPR and in accordance with Section 25 TTDSG:
• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access Status/HTTP Status Code
• Data volume transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.
b) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective. The use of these cookies is also based on Art. 6 para. 1 p. 1 lit. f DS-GVO and § 25 para. 2 TTDSG.
Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
• Transient cookies (for this b)
• Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
d) We use cookies that are technically necessary and that make your visit to our website possible in the first place. If we use cookies that are not technically necessary, we will ask for your consent.
e) In the case of the use of technically mandatory cookies for the presentation and necessary functions of our website, the legal basis is § 25 para. 2 TTDSG and Art. Art. 6 para. 1 p. 1 lit. f DS-GVO (legitimate interest). Insofar as we do not use technically mandatory cookies for the presentation and necessary functions of our website, we will obtain your consent. The legal basis for the use of these cookies is § 25 para. 1 p. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a DS-GVO.
f) You can grant any necessary consents in our Consent Manager when you first access our site and then manage them at any time.
g) Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
h) The list of all cookies used, the description of the legally required information on the individual cookies and the (de)activation of your consent(s) can be found listed below:
Consent management via the Consent Manager
Our website uses the cookie consent technology of TermsFeed (www.termsfeed.com) to obtain your consent to the storage of certain cookies on your end device and to document this in a data protection compliant manner.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC. (for Europe: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland - "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with anonymised IP address logging. This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) p. 1 lit. a DS-GVO. Further information on Google Analytics can be found at https://www.analytics.google.com and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google.de/intl/en/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. ) . For cases where personal data is transferred to the U.S., Google has submitted to the EU-U.S. Data Privacy Framework, https://www.dataprivacyframework.gov/s/. Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/de.html, overview of data protection: https://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: https://www.google.de/intl/de/policies/privacy.
Processing in the B2B area of the website (b2b.stylersmtm.eu):
The processing of personal data is carried out for the use of our website by you, for the fulfilment of a contract with you as a business partner, for the use of our b2b area as well as for a contact relationship. The purposes of the data processing and the necessity primarily depend on the purpose specifically determined by the aforementioned legal relationships.
In the context of a contract with you as a business partner, this includes in particular the establishment, structuring, fulfilment, consultation and invoicing of such a contract together with the services used by you as well as the exchange of personal data with business partners who are required to participate.
Processing also takes place to handle your enquiries and to initiate customer relations or a comparable contact relationship. The legal basis here is Art. 6 Para. 1 lit. b GDPR.
For the aforementioned purposes, it may also be necessary for us to pass on your data to group companies or external service providers, in each case within the framework of order processing.
Data processing for job applications
When you apply to us, we process the information we receive from you as part of the application process, e.g. through your letter of application, CV, references, correspondence, telephone or verbal details. In addition to your contact details, information about your education, qualifications, work experience and skills is particularly relevant to us. We will only assess you according to your suitability for the respective position, so you do not need to send us a photo.
Your data will initially be processed exclusively for the purpose of carrying out the application procedure. If your application is successful, it will become part of your personnel file and will be used to implement and terminate the employment relationship and deleted in accordance with the regulations applicable to personnel files. If we are currently unable to offer you employment, we will continue to process your data for up to six months after sending the rejection in order to defend ourselves against any legal claims, in particular due to alleged discrimination in the application process. Insofar as you receive cost reimbursements or there are other tax-relevant transactions, the corresponding accounting records will be retained in order to fulfil the budgetary and tax law retention obligations in accordance with the respective applicable retention obligations. Your data is initially accessed by our HR department and the "Recruiting" department, but also by the specialist department of the position for which you have applied and, if necessary, by the accounting department. Our administrators and order processors have technically necessary access to data processed by means of IT. They are strictly bound by our instructions and may not process the data for their own purposes. In certain cases, we have to disclose your personal data to third parties, such as to our bank if you receive a reimbursement or to the post office if we communicate with you by letter.
The legal basis for data processing in the application process and as part of the personnel file is Section 26 (1) sentence 1 BDSG and Art. 6 (1) lit b GDPR and, insofar as you have given your consent, for example by sending information not required for the application process, Art. 6 (1) lit a GDPR. The legal basis for data processing after a rejection is Art. 6 para. 1 lit f GDPR. The legal basis for storage under budgetary and tax law is Art. 6 para. 1 lit. c GDPR in conjunction with. § 147 AO. Legitimate interest in the case of processing on the basis of Art. 6 para. 1 lit f GDPR is the defence against legal claims.
As a rule, we do not require any special categories of personal data within the meaning of Art. 9 GDPR for the application process. We ask you not to provide us with any such information from the outset. If such information is exceptionally relevant to the application process, we process it together with your other applicant data. This may, for example, relate to information about a severe disability which you may provide to us voluntarily and which we then need to process in order to fulfil our specific obligations in relation to severely disabled persons. In these cases, the processing serves the exercise of rights or the fulfilment of legal obligations arising from labour law, social security law and social protection. The legal basis for data processing is then Art. 9 para. 2 lit. b GDPR, §§ 26 para. 3 BDSG, 164 SGB IX. Exceptionally, it may be necessary to obtain information about your health or a disability or information from the Federal Central Register, i.e. about previous convictions, in order to assess your suitability for the intended activity. The legal basis for this is § 26 BDSG. Your data will not be used by us for automated decision-making or profiling. Your data will be processed by us or on our behalf exclusively in the EU.
Data transmission to third parties
Within our company, the persons entrusted with processing your data will have access to it within the scope of necessity or reasonable expediency. Service providers and vicarious agents employed by us, such as service providers in the area of IT services, telecommunications and logistics, may also be granted access to personal data for these purposes if they comply with our written instructions under data protection law as well as with general data secrecy within the scope of commissioned processing and - if applicable - with telecommunications secrecy. In particular, we will not transfer any personal data to third parties for the purposes of advertising or address trading.
Data transfer to a third country or to international organisations
Data is only transferred to countries outside the EU or the EEA ("third country") if this is necessary for the performance of the contractual relationship. In the case of other contractual relationships, such as a contact relationship, such data transfer only takes place for the fulfilment of this contractual relationship or insofar as this is exceptionally appropriate due to a legitimate interest. The same applies to the use of our websites from locations outside the EU or the EEA.
Duration of data storage
As part of the use of the websites, we store the IP address and usage data for the duration of the usage process. In addition, the IP address is stored insofar as this is appropriate for data security and the clarification or prevention of security or data protection breaches, whereby the appropriateness depends on the specific threat situation. In this case, the IP addresses will only be stored for as long as is reasonable for the aforementioned purposes. In the event of a criminal complaint or criminal prosecution or the enforcement of claims against persons who carry out security or data protection violations, the storage and use of the data may take place until the final clarification or enforcement of the claims.
In order to establish, form and fulfil a contract with you as a business partner, we store the data until the end of the contract and beyond, namely until the end of the calendar year following the year in which the contract is terminated. Upon expiry of this period, the data is not deleted but blocked, as we must store the data for up to 10 years in accordance with commercial and tax law. This storage also applies to the invoice totals.
Within the scope of a contact relationship, the contact data as well as the communication data are stored and used as far as this is necessary for the respective communication purpose or appropriate within the scope of reasonableness.
Data security
The personal data collected and stored by us will be treated confidentially and protected against loss and changes as well as unauthorised access by third parties by means of suitable technical and organisational precautions. Your personal data is transmitted over the internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.
Automated decisions, profiling
We do not make automated decisions (including profiling) with the personal data we collect when you visit our website.
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below.
Social networks such as Facebook etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-related advertising inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we are not able to track all processing procedures on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the most comprehensive possible presence on the internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSG-VO. The analysis processes initiated by the social networks may be based on different legal grounds, which must be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).
Responsible person and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage period
The data collected directly by us via the social media presence is deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We have a profile on Instagram. The operator of the social network Instagram is Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. Details on how they handle your personal data can be found in the Insta-gram privacy policy: https://help.instagram.com/581066165581870
Youtube
We have a channel on Youtube. The operator of the Youtube service is Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. Details on how they handle your personal data can be found in the Youtube privacy policy: https://policies.google.com/privacy?hl=de&gl=de
We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in the XING privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For details on how they handle your personal data, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.
We have a profile on Pinterest. The provider is Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. For details on how they handle your personal data, please refer to Pinterest's privacy policy: https://policy.pinterest.com/de/privacy-policy
Tumblr
We have a profile on Tumblr. The provider is Tumblr Inc, 60 29th Street #343, San Francisco, CA 94110, USA. Details on how they handle your personal data can be found in Tumblr's privacy policy: https://www.tumblr.com/privacy
Data processing within the scope of the Stylers Digital mobile app:
We offer our own Stylers Digtial mobile app for content management managed by Twixl platform (www.twixlmedia.com). Twixl’s privacy policy: https://twixlmedia.com/twixl-legal-notices#privacypolicy
Your rights
a) You have the following rights in relation to personal data relating to you:
• Right of access (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to processing (Art. 21 GDPR), more details under point 6.
• Right to data portability (Art. 20 GDPR).
b) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR). The competent supervisory authority here is the
Der Hessische Beauftrage für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: 0611-1408 0
E-mail:
poststelle@datenschutz.hessen.de
Objection or revocation against the processing of your data
a) If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation will affect the permissibility of the processing of your personal data after you have expressed it to us.
b) Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the merits of the case and either cease or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the following contact details: By post to Stylers made to measure GmbH, Lahnstrasse 10, D-35232 Dautphetal.
Status: 03.08.2023
DOWNLOAD MENU
Copyright © 2023 Stylers made to measure GmbH - All Rights Reserved
IMPRESSUM / PRIVACY