Data Protection
1. Information about the collection of personal data
With this privacy policy, we intend to inform you about the collection of personal data when using our website. Personal data means any information relating to an identified or identifiable natural person (“data subject”), e.g., name, address, email address, and user behavior.
The controller pursuant Art. 4 (7) GDPR is cetacea GmbH, Goethestraße 21, 80336 Munich, Germany, Telephone: +49 (089) 599 455 8-0, E-Mail: info@cetacea-gmbh.de, (see our legal notices).
Data Protection Officer:
Luisa Scherf
InfiniSafe GmbH
Data Protection and IT Security
Floßmannstr. 16
81245 München
Suppose we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes. In that case, we will inform you about the respective processes below. In doing so, we will also state the defined criteria for the storage duration.
2. General information on the content of this policy
Possible purposes of processing
- Application procedure (justification and possible later implementation as well as possible later termination of the employment relationship)
- Contact requests and communication.
- Provision of events.
- Order of information materials.
Legal bases for processing personal data (legal permission based on Art. 6 GDPR)
Art. 6 (1) (a) GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 (1) (b) GDPR. The same applies to processing operations necessary for pre-contractual measures, such as inquiries about our products or services. If our company is subject to a legal obligation that requires processing personal data, such as fulfilling tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. For example, this would be the case if a visitor to our premises were injured and his or her name, age, health insurance, or other vital information would have to be passed on to a doctor, hospital, or another third party. In that case, the processing would be based on Article 6 (1) (d) GDPR. Ultimately, processing operations could be based on Article 6 (1) (f) GDPR. On this legal basis, processing operations that are not covered by any of the above legal bases are required if the processing is necessary to safeguard the legitimate interests of our company or a third party unless the interests, fundamental rights, and fundamental freedoms of the person concerned prevail. Such processing operations are particularly permitted because the European legislator has specifically mentioned them. In that regard, a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, GDPR).
Transmission to third countries and third parties
If we process data in a third country, i.e., outside the European Union (EU) or the European Economic Area (EEA), or if processing takes place in the context of using the services of third parties or of disclosing or transferring data to other persons, bodies, or companies, this is only done in accordance with the legal requirements.
Subject to express consent or a contractually or legally required transfer, we will only process or have processed the data in third countries with a recognized level of data protection, a contractual obligation through so-called EU standard protection clauses, in the case of certifications or binding internal data protection regulations in accordance with Art. 44 - 49 GDPR.
Storage duration
You will find more information about the individual offers regarding the storage duration of collected data. Insofar as continued storage is required for legal reasons, we will restrict your data until the expiration of these retention periods for further use and delete them as the deadlines expire.
Obligation to provide personal data
We will specify if we are under any obligation to provide personal data to third parties like public authorities or other private entities.
Data collected
In this section, you will find a description of the personal data collected with regard to a specific processing activity.
Recipients / Category of recipients
In this section, you will find all recipients of the collected personal data with regard to a specific processing activity.
Data subject´s rights
In this section, you will find a description of the data subject´s rights at processing activity of collected data. You will find more information about this individual setting and contact options for provided service.
Automated decision-making and profiling
We will inform you in the context of this privacy policy if we use automated decision-making procedures, including profiling.
For this purpose, you will receive information about the logic involved, the scope, and the intended effects of such processing on the data subject.
3. Processing activities
In addition to the purely informative use of our website, we offer various other options you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service or respond to your request.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
Personal data will not be provided to third parties unless permission, according to Art. 6 DS-GVO is fulfilled. For example, we may disclose your personal data to third parties if we offer contract conclusions or similar services with partners. You will receive more information on this when you provide your personal data or below in the offer’s description.
3.1 Informational use of this website
Data collected
- IP-address
- Date and time of the request
- Time Zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Amount of data transferred in each case
- Action performed
Objectives of the data processing
cetacea uses the server log file to monitor the technical operation of this website. The functional cookies are required to make our online services available without restriction.
Legal Basis
The legal basis for the use of server log files and essential cookies is our legitimate interests according to Article 6 (1) (f) GDPR.
Recipients / Category of recipients
The recipient of the data is cetacea GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
The storage period of the server log file is 14 days.
The storage period of functional cookies is the end of the session.
Data subjects’ rights specific to this processing activity
If you do not want cookies to be stored on your computer, you are asked to disable the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
3.2 Google Maps
We integrate the maps of the service "Google Maps" from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit our pages equipped with the Google Maps plug-in, a connection to the servers of Google LLC is established. In doing so, the Google server is informed which of our pages you have visited. Furthermore, if you are logged into your Google account, you enable Google LLC to assign your surfing behavior directly to your personal profile.
For more information on the handling of user data, please see the privacy policy of Google LLC: https://www.google.com/policies/privacy/
Objectives of the data processing
The purpose of the processing is to provide map services within our online presence.
Recipients / Category of recipients
The recipient of the data is Google LLC.
Transmission to third countries
The personal data will be transferred to servers in the USA for storage.
Storage duration
The data sent to Google and linked to cookies, user IDs, or advertising IDs are stored for a maximum of 14 months and will automatically delete after.
Data subjects’ rights specific to this processing activity
You can prevent this exchange by logging out of your Google user account (e.g., YouTube, Google+, Google) before using our website and deleting the corresponding cookies from Google LLC.
You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) from processing this data by downloading and installing this Browser-Add-on.
You can find further information here: https://www.youronlinechoices.com/de/
3.3 Vimeo
We use the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.
On some of our websites, we use the plugins of the provider Vimeo. If you call up the Internet pages provided with such a plugin, a connection is made to the Vimeo servers, and the plugin is displayed. This will be transmitted to the Vimeo server, which of our websites you have visited. If you are logged in as a member of Vimeo, Vimeo LLC assigns this information to your personal user account. When using the plugin, clicking on the start button of a video also assigns this information to your user account.
For more information about data processing and privacy by Vimeo LLC, see https://vimeo.com/privacy.
Data collected
- Information about the use of your account (Vimeo, Twitter, Facebook)
- IP-address
- Date and time of the request
- Referrer URL (Website from which the request comes)
- Host name of the accessing computer
- Operating System and its interface
- Browser type and version
- Language and version of the browser software
- Internet service provider of the accessing system
- Time Zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Amount of data transferred in each case
- In addition, third parties (not further referenced by Vimeo) also collect data and will post-summarize it with other data to use you for profiling purposes.
Objectives of the data processing
The purpose of the processing is to provide video data within our online presence.
Legal Basis
The legal basis for using Vimeo is your consent to the processing according to Article 6 (1) (a) GDPR.
Recipients / Category of recipients
The recipient of the data is Vimeo LLC, and third parties are not further referenced.
Transmission to third countries
The personal data will be transferred to servers in the USA for storage.
Storage duration
If you have an account with Vimeo, your data will be stored if this account exists. Vimeo LLC does not provide any information about the storage period of data that does not have an account.
Data subjects’ rights specific to this processing activity
You can prevent this exchange by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.
You can find further information here: https://www.youronlinechoices.com/de/
3.4 Application
You can apply for advertised positions on our website via your e-mail program (https://www.cetacea-gmbh.de/karriere/offene-stellen).
By transferring the application to us, applicants agree to process their data for the application procedure under this privacy policy.
Please note that e-mails are generally not encrypted and that our customers must ensure on their own. We cannot take any responsibility for the transmission path of the inquiry between the sender and the reception on our server and therefore recommend using the postal method.
You will find further information in our Privacy Notice for candidates.
Objectives of the data processing
We will only use the data entered in the application process.
Suppose special categories of personal data within the meaning of Article 9 (1) GDPR are voluntarily provided within the application procedure. In that case, they will be processed under Article 9 (2) (b) GDPR (e.g., health data, such as severely disabled status or ethnic origin).
Legal Basis
The legal basis for the processing of the applicant data is the fulfillment of contractual measures within the meaning of Article 6 (1) (b) GDPR and Article 6 (1) (f) GDPR if the data processing becomes necessary for us, e.g., within the context of legal proceedings (in Germany, § 26 BDSG applies additionally).
Recipients / Category of recipients
The recipient of the data is cetacea GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
In the case of a successful application, the data provided by the applicants can be further processed by us for the employment relationship. Otherwise, the applicant’s data will be deleted. Applicant data will also be deleted if an application is withdrawn.
The deletion will occur after 12 months, subject to a justified revocation by the applicants so that we can meet our obligation to provide evidence under the Equal Treatment Act.
Data subjects’ rights specific to this processing activity
For questions regarding data storage, please contact the person responsible for data processing: cetacea GmbH, Telephone +49 89 599 455 8-0, E-mail: datenschutz@cetacea-gmbh.de.
3.5 Contact by e-mail, telephone or fax
Visitors of our website https://www.cetacea-gmbh.de/ have several options to send us inquiries via their e-mail program, by telephone, or by fax.
Please note that e-mails are generally not encrypted and that our customers must ensure on their own. We cannot take any responsibility for the transmission path of the inquiry between the sender and the reception on our server and therefore recommend using the postal method.
Data collected
- E-Mail (mandatory by e-mail)
- Phone number (mandatory by phone)
- Fax number (mandatory by fax)
- Your Message (voluntary)
Objectives of the data processing
The objective of the data processing is to answer the request.
Legal Basis
The legal basis for processing your contact request is your consent according to Article 6 (1) (a) GDPR.
Recipients / Category of recipients
The recipient of the data is cetacea GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
We will delete your data after answering your request if you have not consented to use it further.
Data subjects’ rights specific to this processing activity
For questions regarding data storage, please contact the person responsible for data processing: cetacea GmbH, Telephone +49 89 599 455 8-0, E-mail: datenschutz@cetacea-gmbh.de.
3.6 Ordering material via our website
You can register on our website to order information material. We will only use the data entered to process your registered offer or service. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse to provide the information material.
Data collected
- Name (mandatory)
- Company (mandatory)
- E-Mail (mandatory)
Objectives of the data processing
We will use your data to process your order.
Legal Basis
The legal basis for processing your order is Article 6 (1) (b) GDPR.
Recipients / Category of recipients
The recipient of the data is cetacea GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
The data collected during registration will be stored by us for 13 months so that we can meet our verification obligations and will then be deleted. Legal retention periods remain unaffected.
Data subjects’ rights specific to this processing activity
For questions regarding data storage, please contact the person responsible for data processing: cetacea GmbH, Telephone +49 89 599 455 8-0, E-mail: datenschutz@cetacea-gmbh.de.
3.7 Microsoft Bookings (Appointment)
Within our online offer, we use the booking software MS Bookings. The provider of MS Bookings is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
For more information about data processing and privacy, see https://privacy.microsoft.com/de-de/privacystatement.
You can find the terms of use of MS Bookings here: https://learn.microsoft.com/de-de/microsoft-365/bookings/bookings-faq?view=o365-worldwide
Data collected
- E-Mail (mandatory)
- Name (mandatory)
- Address (voluntary)
- Phone number (voluntary)
Objectives of the data processing
We use the entered data only for the purpose of and within the scope of your appointment booking with cetacea GmbH.
Legal Basis
The legal basis for processing your contact request is your consent according to Article 6 (1) (a) GDPR.
Recipients / Category of recipients
The recipient of the personal data collected is cetacea GmbH, and Microsoft Corporation. cetacea GmbH has concluded corresponding data processing agreements with Microsoft Corporation.
Transmission to third countries
Your provided data is stored on the Microsoft 365 platform and in Exchange. Data processing outside the European Union (EU) does not take place in principle, as we have limited the storage location to data centers in the European Union. However, we cannot exclude the routing of data via Internet servers located outside the EU.
Storage duration
The data is generally deleted as soon as it is no longer required to achieve the purpose for which it was collected, and there are no statutory retention obligations that prevent deletion.
Data subjects’ rights specific to this processing activity
You can withdraw your consent at any time, please contact cetacea GmbH, Telephone +49 89 599 455 8-0, E-mail: datenschutz@cetacea-gmbh.de.
3.7 Online Shop (forwarding for orders)
We invite our visitors to order books on the site https://www.cetacea-gmbh.de/publikationen/bucher/ by redirection to our partners: Linde Verlag Ges.m.b.H., Scheydgasse 24, 1210 Vienna, and Amazon Services Europe S.à r.l. (Société à responsabilité limitée), 38 avenue John F. Kennedy, L-1855 Luxemburg.
For further information on the handling of user data, please refer to the privacy policy of Linde Verlag at: https://www.lindeverlag.at/datenschutz/c-655
For more information on the handling of user data, please see the Amazon Services Europe privacy policy at: https://www.amazon.de/gp/help/customer/display.html?ie=UTF8&nodeId=201909010&ref_=footer_privacy
4. SSL or TLS encryption
This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or. TLS encryption. An encrypted connection is indicated by the browser's address bar changing from "http: //" to "https: //" and the lock icon in your browser bar. If SSL or TLS encryption is enabled, third parties cannot read the data you submit to us.
5. Rights of the data subject
You have the following rights with respect to your personal data:
- Information and access right,
- Rectification right,
- Erasure right,
- Right to restriction of processing,
- Right to object to the processing,
- Right to data portability.
In this case, please contact the person responsible for data processing:
Address: cetacea GmbH
Goethestraße 21, 80336 Munich
E-Mail: datenschutz@cetacea-gmbh.de
6. Consent withdrawal or objection against the processing of your data
6.1.
If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time with future effect. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.
6.2.
Insofar as we base the processing of your personal data on a legitimate interest, you may object to the processing. This is particularly the case if the processing is not necessary for the performance of a contract with you, which we describe in the functional description. In the event of such an objection, we will ask you to justify why we should not process your personal data in the way we have. In the event of your justified objection, we will review the situation. We will either stop or adjust the data processing or point out our compelling legitimate grounds for continuing the processing.
6.3.
You may object to the processing of your personal data for advertising and data analysis purposes at any time. About your advertising contradiction, you can inform us under the following contact details: cetacea GmbH, Goethestraße 21, 80336 Munich, E-Mail: datenschutz@cetacea-gmbh.de, (see our legal notices).
7. Right to lodge a complaint
You also have the right to complain to the competent supervisory authority.
8. Modification of this Privacy Policy
Cetacea GmbH, reserves the right to change or to adapt this privacy policy at any time.
9. Picture credits
For the picture “Ziele-erreichen-full.“ #384104413 a license was purchased – origin: Shutterstock Inc. Copyright: Tomas Kotouc: https://www.shutterstock.com/ru/image-photo/humpback-whale-calf-384104413?src=NXtQ6N5KqtBQ0OsMfTlFfA-1-22
For the picture“Wandel gestalten_full.jpg“ #502617208 a license was purchased – origin: Shutterstock Inc. Copyright: wildestanimal: https://www.shutterstock.com/de/image-photo/underwater-view-humpback-whale-calf-vavau-502617208?src=syj6GU4T0it-BQeFtIKkAA-4-93
The picture “Menschen-bewegen_full.jpg“ is a publicly licensed graphic – origin: avantan plus Copyright: Ananukh: https://avatanplus.com/detail/resource-1368438
All other image rights according to § 15 UrhG and § 19 (a) UrhG to the graphics used are owned by cetacea GmbH.
