Data protection

1. General Information and Principles of Data Processing

We are delighted that you are visiting our website. The protection of your privacy and the protection of your personal data, i.e., personal data, when using our website is very important to us.

According to Art. 4 No. 1 GDPR, personal data means any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data for which no reference can be made to your person, for example through anonymization, are not personal data. Processing (e.g., collection, storage, retrieval, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of processing has been achieved and no legally prescribed retention obligations remain to be observed.

Here you will find information about how your personal data is handled when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you.

We will also explain the type and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how these companies handle your personal data.

2. Responsible Body

The entity responsible for processing personal data on this website is (see imprint):

Glück & Glanz CGN GmbH
Pfeilstraße 31-35
50672 Köln
Represented by: Phillis Maaß, Mirko Biendara
Contact:
Phone: 0221 67 77 94 22
Email: info@glueckundglanz.de

3. Provision and Use of the Website/Server Logfiles

a) Type and Scope of Data Processing
When you use this website without otherwise transmitting data to us (e.g., by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:

• IP address

• Date and time of the request

• Name and URL of the retrieved file

• Website from which access is made (referrer URL)

• Access status/HTTP status code

• Browser type

• Language and version of the browser software

• Operating system

b) Purpose and Legal Basis
This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

c) Storage Duration
As soon as the personal data mentioned are no longer required to display the website, they will be deleted. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object in this regard. Further storage may take place in individual cases if this is legally required.

4. Use of Cookies

a) Type, Scope and Purpose of Data Processing
We use cookies. Cookies are small files that are sent by us to the browser of your device during your visit to our website and stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, cookies allow us to make our online offering more user-friendly and effective for you by, among other things, tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect this information directly via your browser. However, cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses. Various types of cookies are used on our website, their type and function are explained below.

Temporary Cookies/Session Cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognize your device during subsequent website visits.

Persistent Cookies

Our website uses so-called persistent cookies. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete persistent cookies independently via your browser settings.

Third-party Cookies

We use analytical cookies to monitor anonymized user behavior on our website.

We also use advertising cookies. These cookies can track user behavior for advertising and targeted marketing purposes.

Social media cookies enable a connection to be established with your social networks and content from our website to be shared within your networks.

Browser Settings Configuration

Most web browsers are pre-set to automatically accept cookies. However, you can configure your browser to accept only certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser so that it notifies you before cookies are stored. Since different browsers may differ in their respective functionalities, we ask you to consult the help menu of your browser for the corresponding configuration options.

Disabling the use of cookies may require storing a permanent cookie on your computer. If you then delete this cookie, you will have to disable it again.

b) Legal Basis
Due to the described purposes of use, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to the use of cookies based on a notice provided by us on the website ("Cookie Banner"), the legal basis is additionally Art. 6 para. 1 lit. a) GDPR.

c) Storage Duration
As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is legally required.

5. Data Collection for Pre-contractual Measures and Contract Fulfillment

a) Type and Scope of Data Processing
In the pre-contractual area and upon conclusion of a contract, we collect personal data about you. This concerns, for example, first and last name, address, e-mail address, telephone number or bank details.

b) Purpose and Legal Basis of Data Processing
We collect and process this data exclusively for the purpose of contract execution or for the fulfillment of pre-contractual obligations.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. If you have given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage Duration
The data will be deleted as soon as they are no longer necessary for the purpose of their processing.

In addition, there may be legal retention obligations, for example, commercial or tax law retention obligations according to the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

6. Order Form

An order form is available on our website, which can be used for electronic pre-orders.

a) Type and Scope of Data Processing
Our data collection is limited to the following data:

• First and Last Name

• Address

• Phone Number

• Email Address

• Account Details

• Product Name

b) Purpose and Legal Basis
The purpose of data processing is to be able to process your order appropriately.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of the data serves to fulfill a contract or is necessary for the implementation of a pre-contractual measure that was carried out at the request of the data subject.

c) Storage Duration
The data will be deleted as soon as they are no longer needed to achieve the purpose of processing.

7. Registration Option

a) Type and Scope of Data Processing
You can register on our website. When you register, we collect and store the data you enter into the input mask (e.g., last name, first name, email address). No data will be passed on to third parties.

b) Purpose and Legal Basis of Data Processing
Your registration is necessary for the use of certain content and services on our website or for the fulfillment of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the data stock of the controller.

The legal basis for processing in the case of consent is Art. 6 Para. 1 lit. a)
GDPR. If your registration serves to prepare a contract, Art. 6 Para. 1 lit. b) GDPR is an additional legal basis.

c) Storage Period
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

8. Data Transfer

We only pass on your personal data to third parties if:

a) You have given your explicit consent in accordance with Art. 6 para. 1 lit. a) GDPR.

b) this is legally permissible and necessary according to Art. 6 para. 1 lit. b) GDPR for the fulfillment of a contractual relationship with you or the implementation of pre-contractual measures.

c) there is a legal obligation for the transfer according to Art. 6 para. 1 lit. c) GDPR.

We are legally obliged to transmit data to state authorities, e.g., tax authorities, social insurance carriers, health insurance companies, supervisory authorities and law enforcement agencies.

d) the transfer according to Art. 6 para. 1 lit. f) GDPR is necessary to protect legitimate business interests, as well as for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred.

e) we use external service providers, so-called processors, for processing in accordance with Art. 28 GDPR, who have been obliged to handle your data carefully.

We use such service providers in the areas of:

• IT

• Logistics

• Telecommunications

When transmitting data to external entities in third countries, i.e., outside the EU or the EEA, we ensure that these entities handle your personal data with the same care as within the EU or the EEA. We only transmit personal data to third countries for which the EU Commission has confirmed an adequate level of protection or if we ensure the careful handling of personal data through contractual agreements or other appropriate guarantees.

9. Application Option
a) Type and Scope of Data Processing
You can apply on our website or by email. If you apply, we collect and store the data that you enter into the input mask or send to us by email.

b) Purpose and Legal Basis
We process your data only for the purpose of processing your application.
No data is transferred to third parties. The legal basis for the processing is Art. 88 (1) GDPR in conjunction with Section 26 BDSG, and additionally Art. 6 (1) (b) GDPR.

If you give us consent to be included in our applicant pool, the legal basis is Art. 6 (1) (a) GDPR.

c) Storage Duration
If we cannot offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. The period begins upon receipt of the rejection letter.

If you have given us consent to be included in our applicant pool, we will store your data for a maximum of two years.

d) Data Transfer
Your data will only be received by those departments involved in the decision (responsible HR and specialist departments, management, works council).

In addition, we are obliged to transmit your data to public authorities and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office, social security providers, etc.).

Further data recipients may be those entities for which you have given us your consent to transfer data.

10. Comment Function

a) Type and Scope of Data Processing
You can comment on posts on our website. When you comment on a post, we collect and store the data you enter into the input mask. In addition to the comments you leave, information about the time of comment entry and possibly the username (pseudonym) you chose will also be stored and published. Furthermore, the IP address assigned by the Internet Service Provider (ISP) of the data subject will be stored. No data is transferred to third parties.

b) Purpose and Legal Basis
The data transmitted by you (e.g., the IP address) is processed for security reasons and in case the data subject infringes the rights of third parties or posts illegal content through a comment.