Privacy Policy Website
www.intermate.de
PREAMBLE AND DEFINITIONS:
1. PRESAMBLE
As part of the operation of our website www.intermate.de (hereinafter referred to as “website”), we process personal data. These are treated confidentially by us and are processed in accordance with the applicable laws - in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG-new). Our Privacy Policy aims to provide you with information about the personal data we collect from you, the purposes for which we use it and the legal basis for such use, as well as, where applicable, to whom we disclose the data. In addition, we will explain to you what rights you have to protect and enforce the protection of your data.
2. DEFINITIONS
Our Privacy Policy contains technical terms which occur in the GDPR and the BDSG-new. For your better understanding we want to explain these terms in simple words in advance:
2.1 PERSONAL DATA
"Personal data" means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, the name or the e-mail address. However, personal data is also data for which the identity is not immediately obvious, but which can be determined by combining own information with third-party information and thus finding out the identity of the person concerned. For example, a person can be identified through providing his or her address or bank details, date of birth or user name, IP addresses and/or location data. Any information that allows conclusions to be drawn about a person in any way whatsoever is relevant here.
2.2 PROCESSING
Art. 4 No. 2 GDPR defines "processing” as any operation which is performed on personal data. This applies in particular to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
CONTROLLER AND DATA PROTECTION OFFICER
3. CONTROLLER
The body responsible for data processing is:
Company: INTERMATE Media GmbH ("we")
Legal representative: Alisa Sljoka, Alessandro De Pasquale, Jörn Mecher, Philip Papendieck (Managing Director)
Address: Schlüterstraße 54, 10629 Berlin
Phone: +49 (0) 30 75 43 91 18
E-Mail: info@intermate.de
4. DATA PROTECTION OFFICERWe have appointed an external data protection officer for our company. You can contact him at:
Name: Arne Platzbecker
Adress: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg, Germany
Phone: +49 040/ 18189800
Fax: +49 040/ 181898099
E-mail: datenschutz@habewi.de
PROCESSING FRAMEWORK
5. PROCESSING FRAMEWORK: WEBSITE
As part of our website with the URL www.intermate.de, we will process your personal data as individually listed in paragraphs 6 – 12. We only process data from you which you actively provide to us on our website (e.g. by completing forms) or which you automatically provide to us when you use our service. Your data will be exclusively processed by us and will not be sold, lent or passed on to third parties. Insofar as we use external service providers for the processing of your personal data, this is done within the scope of commissioned data processing, during which we, as the controller, are authorised to instruct our processors as the customer. For the operation and hosting of our website, we use the external service provider Hetzner. Our website is hosted in Hetzner data centres in Germany. If any of the processing operations listed in paragraphs 6-12 involve the use of other external service providers, they shall be designated there. A data transfer to third countries does not take place in principle and is also not planned. We will inform you about exceptions to this principle in the following processing steps.
DATA PROCESSING IN DETAIL
6. SERVER LOG FILES
6.1 DESCRIPTION OF PROCESSING
Every time you visit the website, we will automatically collect information, which your browser transmits to our server. This information is also saved in the log files of our system. This includes the following data:
- Your IP address, the last octet of the address is anonymised in the process
- The browser software that you are using, including the version and language
- The operating system that you are using
- The website that took you to our website (referrer)
- The webpages that you have called up on our website
- The date and the time of your visit to our website
- Your internet service provider
- The volume of data transferred
- Country and place from which you visited our website
- The time you have spent on our website
6.2 Purpose The processing is technically necessary for us to display our website and to ensure its stability and security. Additionally, the processing serves the statistical evaluation and improvement of our online service.
6.3 Legal basis The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 6.2.
6.4 Storage period The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the event of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files will be deleted after 30 days.
7. CONTACT FORM AND CONTACT BY EMAIL
7.1 DESCRIPTION OF PROCESSING
There are several contact forms on our website, which can be used to contact us. On the webpage https://intermate.de/jobs/ you can send us a quick application with details of your LinkedIn or Xing profile and a message. At https://intermate.de/contact-us/ you, as an influencer, can send an application. In this form you will be asked to enter your family name, your first names and a contact telephone number. All other fields are voluntary and do not have be completed. If you press the “send” and/or “submit application” button, the data will be encrypted and sent to us through an SSL connection (see paragraph 14). The contact form can only be transmitted if you accept our privacy policy by clicking the relevant check box. You can also contact us via the email addresses provided on the website. In this case we will process the personal data transmitted with the email.
7.2 PURPOSE
The purpose of the provision of a contact form on our website is to enable you to contact us with ease. The data transmitted with and in the contact form and your email will solely be used for the purpose of processing and responding to your application.
7.3 LEGAL BASIS
The processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 7.2. If the email contact is aimed at the conclusion of a contract, the data processing is necessary for the performance of a contract (Art. 6 (1) lit b GDPR).
7.4 STORAGE PERIOD
We will delete the data as soon as they are no longer necessary to achieve the purpose for which they were collected. This is usually the case once the relevant communication with you has ended. The communication has ended where it can be inferred from facts and circumstances that your request has been concluded. We will store application documents for a period of 6 months and subsequently delete them.
8. COOKIES
8.1 DESCRIPTION OF THE PROCESSING
Our website uses cookies. Cookies are small text files that are stored on the user’s device during the browsing of a website. Cookies contain information that allow the recognition of a device and, if applicable, enable certain functions of a website. In most cases we only use “session cookies”. These are automatically deleted when you end your Internet session and close your browser. Other cookies are stored on your device for a longer period. We use the following cookies on our website: Cookie-Name: qtrans_front_language, purpose/function: This cookie is placed by the Wordpress Plugin “qTranslate X“ and is relevant to support multiple languages on the page. Storage period: This cookie expires 30 days after it was placed.
8.2 PURPOSEWe use cookies to make our website more user-friendly and to offer the functions described in paragraph 8.1.
8.3 LEGAL BASISThe processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 8.2.
8.4 STORAGE PERIODCookies are automatically deleted at the end of a session and/or upon expiry of the stipulated storage period. As cookies are stored on your device you, as the user, have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your Internet browser. Existing cookies can be deleted at any time. This can also be done automatically. Some of the website's functions may not be available or may be limited if cookies are disabled.
9. SOCIAL NETWORKS
9.1 DESCRIPTION OF THE PROCESSING
Some of the webpages on our website use social plug-ins from the external social networks Facebook and Instagram. When you visit one of our pages containing such a plugin, your browser establishes a direct connection to the servers of the social network. The social network transmits the content of the relevant social plugin directly to your browser and it is displayed on our website. To prevent this, we use the double opt-in method. We have integrated the social plugins on our website so that the connection between the social plugins and the servers of the social networks is interrupted by default. If you communicate directly with a social network on our website via a social plugin and want to exchange data, you must click the relevant social plugin to activate it. Following the activation of a social plugin, we cannot influence the extent of the data collected by the relevant social network. We will therefore inform you according to our level of knowledge. By activating a social plugin, your IP address in conjunction with our website address will be transmitted to the relevant social network. If you are logged in to the social network when you visit our website, this information is assigned directly to your user account. If you interact with an activated social plugin, for example, if you click the “share”, “like” or “retweet” button, the relevant information will also be sent directly to the relevant social network and will also be stored in your user account. The social networks that you communicate with, will store your data in the form of user profiles and also use them for advertising purposes, market research and/or to tailor your websites as required. You have the right to object to the creation of these user profiles. To exercise these rights, you must contact the social networks directly.
9.2 PurposeThe data is processed to facilitate the easy and user-friendly communication with social networks.
9.3 Legal basisThe processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 9.2.
9.4 Recipient and transmission to third countriesBy activating a social plugin your data will be sent to one of the following social networks:
Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. For further information on data protection at Facebook see
http://www.facebook.com/policy.php;
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and
http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; For further information on data protection at Instagram see
https://help.instagram.com/155833707900388/.
The social networks also process your personal data in the US and are governed by the EU-US-Privacy Shield. For further information regarding the EU-US Privacy Shield, see
https://www.privacyshield.gov/EU-US-Framework.
10. GOOGLE WEB FONTS10.1 Description of the processing
Our website uses “Google web fonts”, a font replacement service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. Ireland (hereinafter referred to as “Google”). Google web fonts replace default fonts on your device with fonts from the Google catalogue to present our website. If your browser does not support the integration of Google web fonts, the text on our website will be displayed in a default font on your device. The Google fonts will be loaded directly from a Google server. For this purpose, your browser will send a request to a Google server. As a result your IP address in conjunction with our website address may be transmitted to Google. However, Google will not place cookies on your device. According to Google, data processed during the Google web font service will be sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be used in connection with the parallel use of other Google services such as the Google search engine or Gmail. For further information regarding data protection for Google web fonts, see https://developers.google.com/fonts/faq?hl=de-DE&csw=1. For general information regarding data protection at Google, please see http://www.google.com/intl/de-DE/policies/privacy/
10.2 PurposeThe data are processed to be able to improve the visual presentation of the text on our website.
10.3 Legal basisThe processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 10.2.
10.4 Recipient and transmission to third countriesBy using Google web fonts your personal data may be transmitted to Google. Google will also process your personal data in the US and is governed by the EU-US-Privacy Shield. For further information regarding the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.
11. ICONS
11.1 Description of the processingOur website uses content delivery networks (CDN). CDNs accelerate the loading of common fonts and icons because the files are transmitted by fast, local or underused servers of external service providers. We have integrated website icons (graphic symbols) of the external service providers on our website. These icons are directly loaded from a server of the external service providers. For this to be possible, your browser will send a request to these servers. As a result your IP address in conjunction with our website address may be transmitted to the servers of the external service providers.
11.2 PurposeThe data is processed to visually improve the display of our website by integrating graphic symbols and to shorten the time it takes to load them.
11.3 Legal basisThe processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 11.2.
11.4 Recipient and transmission to third countriesBy integrating the icons, your data will be transmitted to the following external service providers in the USA: Fontawesome (www.fontawesome.com): Fonticons, Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; For further information regarding Font Awesome please see https://fontawesome.com/help and in the Privacy Policy of Fonticons, Inc.: https://fontawesome.com/privacy. Linearicons (cdn.linearicons.com): Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States. For further information regarding data protection of Amazon Web Services see: https://aws.amazon.com/de/privacy/?nc1=f_pr11. ICONS
12. Google Analytics
12.1 Description of the processing
Our website uses “Google Analytics,” a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses cookies (see paragraph 8) that allow for an analysis of your use of our service. The information generated by the cookie is generally transferred to a Google server in the US and stored there. However, we use Google Analytics solely with IP anonymization. As a result, your IP address is shortened by Google prior to this within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the entire IP address transferred to a Google server in the US and shortened there. The IP address transmitted by Google Analytics from your browser is not combined with other Google data. The statistics prepared by Google Analytics record in particular how many users visit our website, from which country or location it is accessed, which webpages are visited and via which links or search terms visitors reach our website. The Google Analytics Terms of Service can be found at HTTP://WWW.GOOGLE.COM/ANALYTICS/TERMS/DE.HTML. An overview of data protection at Google Analytics can be found at HTTP://WWW.GOOGLE.COM/ANALYTICS/TERMS/DE.HTML. The Google Privacy Policy can be viewed at HTTPS://POLICIES.GOOGLE.COM/PRIVACY.
12.2 PurposeThe data is processed so that we can analyze and evaluate the use of our website. The information obtained as a result of this is used for improving and tailoring our online presence as needed.
12.3 Legal basisThe processing is necessary to protect the predominant legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose set out in paragraph 12.2.
12.4 Storage period and the right to objectWe provided information on the storage period as well as your control and configuration options with regard to cookies in paragraph 8. You can object to data processing by Google Analytics at any time by downloading and installing the browser add-on provided by Google at HTTPS://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT. Alternatively, you have the option to click on the following link. In doing so, an opt-out cookie that prevents your data from being recorded during future visits to this website is placed on your device. The analytical data processed and stored with Google Analytics is deleted by us automatically after 14 months.12.5 Recipient and transmission to third countriesGoogle Analytics works for us as a service provider within the scope of commissioned data processing. Google will also process your personal data in the US and is governed by the EU-US Privacy Shield. For further information regarding the EU-US Privacy Shield, see HTTPS://WWW.PRIVACYSHIELD.GOV/EU-US-FRAMEWORK.
13. Lottery13.1 Description of the processingFrom time to time, we run lotteries on our Facebook page and/or Instagram profile. We first publish an invitation to participate in the lottery there. How you can participate in the lottery is explained in the linked terms and conditions of the lottery. By participating in the lottery, a lottery contract is concluded between you and us, which is free of charge for you. In the course of fulfilling the contract - namely to determine the winners and to distribute the prizes - we will collect personal data from you. After the closing date, we first collect Facebook and/or Instagram profile names of all participants. The winners are drawn by us and then notified via Facebook message or Instagram message. As a winner you will be asked to provide additional information (first and last name, address) so that we can send you the prize.
13.2 PurposeThe processing is carried out for the purpose of conducting and processing a lottery.
13.3 Legal basis
The processing is necessary for the conclusion and fullfilment of the lottery agreement (Art. 6 para. 1 lit. b DSGVO).
13.4 Storage periodThe data will be deleted as soon as it is no longer necessary for the purpose of their collection. The profile names of the participants, as well as the further details of the winners will be deleted as soon as the lottery and the sending of the prizes are completed. The actions (comments, likes, postings) taken by participants in the context of participation on Facebook or Instagram are not deleted by us or, if applicable, cannot be deleted by us at all. However, as a user of the respective social network, you are able to delete them yourself.
13.5 RecipientWe will not disclose your data to third parties. We will not publicly announce the winners on our website or on our social media profiles. When you enter a contest, your entry (your comment, like, posting, etc.) will be stored by Facebook or Instagram. For more information on the privacy of social networks, please refer to the linked privacy policy.
Facebook: Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA. Privacy policy:
http://www.facebook.com/policy.php;
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and
http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; Privacy Policy:
https://help.instagram.com/155833707900388/.
The social networks also process your personal data in the USA and have submitted to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at
https://www.privacyshield.gov/EU-US-Framework.
SECURITY MEASURES14. SECURITY MEASURESTo protect your personal data from external access, we have installed an SSL and/or TLS certificate on our website. SSL means “secure sockets layer” and TLS means “transport layer security” and encrypts the communication of data between a website and the user’s device. The SSL and/or TLS encryption is active when a small padlock symbol is displayed to the left of the address line in the browser.
15. RIGHTS OF DATA SUBJECTS
With regard to the processing of data by our company described above, you can assert the following rights of data subjects:
15.1 Right of access (Art. 15 GDPR)
You have the right to ask us to confirm whether we are processing personal data concerning you. If this is the case, you have the right to information on this personal data and on the further information listed in Art. 15 GDPR under the conditions specified in Art. 15 GDPR.
15.2 Right to rectification (Art. 16 GDPR)You have the right to request us to correct any incorrect personal data concerning you and, if necessary, to complete incomplete personal data without undue delay.
15.3 Right to erasure (Art. 17 GDPR)You have the right to request us to delete personal data relating to you without undue delay if one of the reasons listed in detail in Art. 17 GDPR applies, for example if your data is no longer necessary for the purposes we pursue.
15.4 Right to restriction of processing (Art. 18 GDPR)You have the right to request us to restrict the processing if one of the conditions listed in Art. 18 GDPR applies; for example, if you contest the accuracy of your personal data, data processing will be restricted for a period enabling us to verify the accuracy of your data.
15.5 Right to data portability (Art. 20 GDPR)
You have the right, under the conditions set out in Art. 20 GDPR, to receive the personal data concerning you in a structured, commonly used and machine-readable format.
15.6 Right to withdraw consent (Art. 7 para. 3 GDPR)If the data processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal is valid from the time of its assertion. In other words, it has effect for the future. The processing therefore does not become retroactively unlawful through the withdrawal of the consent.
15.7 Right to lodge a complaint (Art. 77 GDPR)If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right before a supervisory authority in the EU Member State of your place of residence, place of work, or the place where the alleged infringement occurred.
15.8 Prohibition of automated decision-making / profiling (Art. 22 GDPR)Decisions that produce legal effects concerning you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We hereby inform you that we do not use automated decision making including profiling with regard to your personal data.
15.9 Right to object (Art. 21 GDPR) If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR (to protect overriding legitimate interests), you have the right to object to this under the conditions set out in Art. 21 GDPR. However, this only applies if you have grounds relating to your particular situation. After an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to cease processing if it serves to establish, exercise or defend legal claims. In any case – regardless of your particular situation – you have the right to object at any time to the processing of your personal data for direct marketing.
Last updated: March 2023
