Privacy declaration

Responsible Authority

Thank you for visiting our website. In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the EU General Data Protection Regulation (GDPR):

POLYVANTIS GmbH
Riedbahnstraße 70
64331 Weiterstadt
Germany

Managing Directors:
Dr. Wolfgang Pöffel
Peter Stubbe
Falk Majert

E-mail: info@polyvantis.com

 

Data Protection Officer

Dr. Christian Borchers

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

0931 / 30 49 76 0

office@datenschutz-sued.de
www.datenschutz-sued.de

Data processing in the context of visiting the website

Processing of IP address and usage data

Type of data

When you visit our website, the following usage data is temporarily stored on our web server:

  • The page from which the file was requested
  • The name of the file
  • The date and time of the query
  • The amount of data transferred
  • The access status (file transferred, file not found)
  • A description of the type of web browser and operating system used, including the language used
  • The referrer’s address, which indicates the page from which you accessed our website
  • The IP address of the requesting computer

Legal basis and purpose of data processing

We use this data strictly for a specific purpose relating to the legitimate interest in detecting, restricting and eliminating attacks on our website. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

Insofar as we use technically necessary cookies and similar technologies in the context of the integration of the service, this is done in accordance with Section 25 para. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). Subsequent data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR in our legitimate interest in being able to provide you with an appealing and functional website as well as guarantee the security and freedom from disruption of our website and the data processing that takes place via it.

Duration of storage

We anonymize the IP address after seven days. Once the IP address has been anonymized, it is no longer possible to establish a personal reference to the usage data.

Recipients / categories of recipients

Our web agency, as a service provider bound by instructions, has access to this data as an order processor in accordance with Art. 28 GDPR in order to support us in the operation of our website and the associated processes.

This is currently:

BippesBrandão GmbH
Andréstraße 49
D-63067 Offenbach am Main

Cookies

Cookie Opt-In

Upon opening the website, we have asked you to consent to the storing of certain cookies which will be placed while you visit our website. Based on your consent pursuant to Art 6 para. 1 (a) GDPR, our website thus uses cookies, so that our offer can be used in a better, more effective and more secure way.

Cookies are text files that are stored on your computer and which store certain data about your user behavior on our page, so that certain features or offers can be made available to you based on your previous use. These can be “session cookies”, which are automatically deleted when you leave our website. Other cookies are stored on your computer permanently until you delete them. That allows us to recognize your browser when you visit our website again and to provide you with features or offers according to your previous usage.

Your browser allows you to prevent the use of cookies in general or in specific cases. Please check the instructions for your browser to find out more about this. You can also delete cookies following these instructions which we have listed for you:

for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
for Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
for Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-data-von-websites-entfernen
for Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
for Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may limit the functionality of our website and of other websites visited by you.
More information on this topic, in particular how you can administer, limit or completely disable third-party cookies and technologies with a similar purpose, can be found at:

http://www.aboutads.info/choices
http://www.youronlinechoices.eu
http://www.networkadvertising.org/choices

Google

Google Analytics

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the Google Analytics tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. This allows to analyse the use of websites and to put together pseudonymous profiles of users based on the data. In order to do this, Google applies different technologies, among them also storing cookies on your computer. These store information about the use of our page, which we will use to improve our offers.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA. Google has subjected itself to the Privacy Shield Framework

We have taken additional precautions to ensure the appropriate protection of your data as far as possible. Before transferring it to Google, we anonymize your IP address. This is achieved by activating the Anonymizelp() feature in the tracking code of Google Analytics.

We have also concluded a contract with Google about the processing of data, according to which Google will not combine your data with other data collected by Google in order to find out your identity.

If this should not be sufficient for you, you can also use the link http://tools.google.com/dlpage/gaoptout
to download and install a browser plugin provided by Google to block Google Analytics, preventing Google from collecting and transferring your personal data.

You can also prevent the data collection by Google Analytics by confirming the subsequent link deactivate Google Analytics to deactivate Google Analytics by setting an opt-out cookie which will also prevent the collection of your data.

You will find more information about Google’s precautions regarding data protection at the following link:
https://www.google.de/intl/de/policies/privacy/.

Additionally for the general handling with cookies, their deactivation and transfer of data to third parties (in particular USA) we refer to the general part of this declaration.

Google Maps

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use Google Maps API, a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”), in order to show an interactive map.

By using Google Maps, particularly through active Java scripts, information about your use of this website (including your IP address) may be transmitted to a server of Google in the USA and can be stored there. Google has subjected itself to the Privacy Shield framework.

Further information about the use of your data by Google can be found in the privacy policy of Google at https://www.google.de/intl/de/policies/privacy/.

If you don't want your data to be transmitted, you can deactivate the execution of Java scripts in your browser or install a blocker, which will prevent the execution of Java scripts (e.g. https://noscript.net). But we do want to point out that this may impede the use of our or other websites.

Social Media

Social Media Links

General Information

We refer with links to our social media presences. When you follow any such link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information.

YouTube

Our website uses links to our presence in the social network of YouTube by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. It is just a normal link. Thus, when you open our site, YouTube will not learn of your visit to our website. But once you click on the link, you will be led to YouTube, allowing YouTube to learn that you have visited out site.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA. But YouTube/Google is registered with Privacy Shield and must adhere to the EU data protection rules.

The collection and use of your data which is possibly carried out by YouTube after clicking on the link is beyond our knowledge or control. You may find further information in YouTube’s privacy policy at
https://www.google.de/intl/de/policies/privacy/.

Social Media Videos

Youtube (Two Click)

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR we use YouTube, a service provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland in order to embed videos.

To protect your data, we have installed a two-click solution. That way, Google won't learn about your visit once you access our website, but only once you actually click the button. If you confirm the plugin while being logged in at YouTube, Google may attribute your use to your user account.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA, but YouTube/Google is registered with Privacy Shield and must adhere to the EU data protection rules.

The collection and use of your data which is possibly carried out by YouTube after clicking on the link is beyond our knowledge or control. You may find further information in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy/.

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

E-mail contact and phone calls

Of course, we treat personal data that you provide to us by telephone or email confidentially. We will only use your data for the purpose of processing your request.

Type of data processed

For this purpose, we store your first name, last name and email address. Any additional personal information you provide will be considered voluntary.

Legal basis and purpose of data processing

The legal basis for the data processing of a general inquiry is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our and your parallel (legitimate) interest in this data processing results from the purpose of answering your inquiries, solving any problems that may arise and thus maintaining and promoting your satisfaction as a user of our website.

The legal basis for any inquiry is Art. 6 para. 1 sentence 1 lit. b) GDPR and processing is performed in order to carry out pre-contractual measures, namely the initiation of the contract.

Recipients / categories of recipients

If, in individual cases, the disclosure of your personal data appears to be expedient, we will inform you of this and ask for your consent. We will not pass on your data to third parties for these purposes without your consent.

Duration of storage

All personal information that you provide to us in the event of inquiries via this website or by email will be deleted or anonymized by us no later than 95 days after the final response has been given. Experience has shown that queries about our answers generally no longer arise after 95 days. If you assert your rights as a data subject (see section 8), your personal data will be stored for three years after the final response to prove that we have provided you with comprehensive information and that the legal requirements have been complied with.

External links

If you follow an external link on our website, the data privacy statements and declarations there apply. As soon as you click on an external link, data is transmitted to the operator of the respective website, in particular your IP address, the time at which the link was accessed and the page from which you clicked on the link.

Applications

We look forward to every interesting application, be it for a specifically advertised position or on an unsolicited basis. You have the option of sending us an application in electronic form.

Type of data

If you decide to send us an application by email, we would like to point out that you determine the scope of the data that you transmit to us as part of your application. The application typically includes information about you (title, surname, first name, date of birth and, if applicable, town/city, residential address, other contact details such as telephone number and email address), information about your level of education (school, vocational training and/or information about your university education including corresponding certificates), information about your previous professional experience (details of previous employers, activities there, when you worked there and references from your previous places of work or internships), information about your motivation for applying, any interests and other information about the résumé / curriculum vitae and, if applicable, salary expectations and a photograph.

Legal basis and purpose of data processing

The legal basis for the processing of your personal data by us in the application process arises from Art. 88 para. 1 GDPR in conjunction with Section 26 para. 1 sentence 1 of the German Federal Data Protection Act (BDSG) or Art. 6 para. 1 sentence 1 lit. b) GDPR. We process the data that you provide to us as part of your application exclusively for the purpose of reviewing your application, selecting applicants and, if necessary, preparing joint interviews. Data will not be processed for other purposes.

If you also provide us with data that is not absolutely necessary for the aforementioned purpose (e.g., information on hobbies), we would like to point out that this is done voluntarily by you. By submitting this information to us, you agree in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR that we may also process your data in order to get an impression of your application in advance.

Recipients / categories of recipients

Your information will be treated confidentially in our company and will not be passed on to third parties. Internally, depending on the delivery method, applications are handed over electronically or as a manual file to our HR department, where they are processed as quickly as possible. As a rule, applications are forwarded to the decision-makers for filling the specific position.

Duration of storage

If your application is followed by the conclusion of an employment contract, the data you have transmitted may be stored by us in your personnel file for the purpose of the usual organizational and administrative process in compliance with the relevant legal provisions.

If you are not employed, the data provided by you will usually be deleted three months after notification that the application has been rejected.

If you have not been hired, but your application is still of interest to us, we will ask for your consent to hold onto your application for future job advertisements.

Customers

In the following, we would like to inform you about how we handle the collection, use and disclosure of personal data in the context of our order or contract processing.

Type of data

If you or your company commissions us, we collect and process the following personal data in particular:

  • Salutation, first name, last name
  • A valid email address
  • Address
  • Telephone number (landline and/or cell phone)
  • The information necessary for processing orders or contracts

Legal basis and purpose of data processing

If you, as a natural person, directly request or enter into the contractual relationship with our company, Art. 6 para. 1 sentence 1 lit. b) GDPR is the relevant legal basis for the processing of your data, since you personally are or will be our customer.

If you request a contractual relationship with our company on behalf of a company or enter into a contractual relationship on behalf of your company, Art. 6 para. 1 sentence 1 lit. f) GDPR is the relevant legal basis for the processing of your data. The legitimate interest then arises from the interest in concluding and properly processing the order and the necessary communication with you as our contact person at the contracting company.

If you also voluntarily provide us with data that is not absolutely necessary for the aforementioned purpose, we would like to point out that this is done voluntarily. By transmitting this information to us, you agree that we may also process your data in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

Data processing is carried out in the following scenarios:

  • Identification of yourself or the company for which you are acting as a real customer
  • Preparation of an offer for the conclusion of a contractual relationship
  • Performance of the contractual relationship
  • Maintaining the necessary correspondence with you or the company for which you are acting
  • For invoicing
  • The mutual fulfillment of other obligations arising from the imminent or concluded contract
  • To settle any liability claims that may exist and to assert any claims against you or the company for which you are acting

Recipients / categories of recipients

Insofar as this is necessary for the processing of the contractual relationship, we transmit your personal data to third parties such as tax consultants. The data passed on may only be used by the third party for the stated purposes.

In exceptional cases, data will be processed on our behalf by processors. These are carefully selected in each case, are also audited by us and are contractually obligated in accordance with Art. 28 GDPR.

Duration of storage

In principle, personal data will be kept for as long as is necessary to fulfill the aforementioned purposes.

However, we may be required to retain some personal data for a longer period of time, taking into account factors such as the following:

  • Legal obligations under applicable law to retain data for a longer period of time
  • Statutes of limitations under applicable law
  • (Potential) litigation
  • Guidelines issued by competent data protection authorities

The data will also be stored for a longer period if you have expressly consented to such storage in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

Business partners (not applying to customers)

In the following, we would like to inform you – as a business partner (always including all forms of service providers, craftspeople, suppliers, landlords or all other business partners except customers) or as our contact person at a business partner of our company or interested parties – about how we collect, use and disclose personal data.

Type of data

In the context of a business relationship with our company, we require the personal data that we are legally obliged to collect or are entitled to collect on the basis of legitimate interests and that is necessary for the establishment, execution and termination of the business relationship and for the fulfillment of the associated obligations, which we are legally obliged to collect or are entitled to collect on the basis of legitimate interests. Without this data, we will generally not be able to contact you and/or enter into a business relationship.

If you are a business partner or if your company enters into a business relationship with our company or negotiates such a relationship with us during the initiation phase, we therefore generally process the following personal data:

  • Salutation, first name, last name
  • A valid email address
  • Address of the business partner
  • Business telephone number (landline and/or cell phone)
  • The required offer and contract information (including the subject of the business relationship, type of service, price information on this, execution modalities, time of execution, information on the due date)
  • Information about the implementation of the business relationship (correspondence data, any warranty issues, duration of the business relationship)
  • If applicable, tax numbers, commercial register number and business bank details

Legal basis and purpose of data processing

If you, as a natural person (e.g., as a sole proprietorship), directly inquire or enter into a business relationship with our company, Art. 6 para. 1 sentence 1 lit. b) GDPR is the relevant legal basis for the processing of your data, as you are or will be our contractual partner.

If you negotiate a business relationship with our company on behalf of a company or enter into a business relationship on behalf of your company, Art. 6 para. 1 sentence 1 lit. f) GDPR is the relevant legal basis for the processing of your data. The legitimate interest then arises from the interest in concluding and properly executing the underlying business relationship and the necessary communication with you as our contact person at the actual business partner company.

In both scenarios, data processing is carried out for the following purposes:

  • Implementation of precontractual measures that precede a contractually regulated business relationship (preparation and response to requests for quotations)
  • Fulfillment of obligations arising from a concluded contract (e.g., purchase contracts, service contracts, deliveries, execution of payments)
  • Assertion, exercising or defense of legal claims arising from the business relationship
  • Ensuring IT security and IT operations, provided that you or, as part of the business relationship, your company will have access to our IT infrastructure or individual systems

In addition, we are subject to various legal obligations that may require the processing of your personal data in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR. These legal obligations may arise, for example, from tax, commercial and foreign trade law or sanctions regulations.

Recipients / categories of recipients

Insofar as this is necessary for the aforementioned purposes, we will pass on your personal data to third parties (e.g., tax advisors). Otherwise, data will only be passed on to third parties if you have previously expressly consented to the transfer in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. In exceptional cases, data will be processed on our behalf by processors. These are carefully selected in each case, are also audited by us and are contractually obligated in accordance with Art. 28 GDPR.

Data transfer to third countries

If we transfer personal data to recipients outside the EU or the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the European Commission to provide an adequate level of data protection, if an adequate level of data protection has been agreed with the data recipient (e.g., by means of EU standard data protection clauses) or if you have given us your consent to this in accordance with the requirements of Art. 49 para. 1 GDPR.

Duration of storage

The personal data will be stored for as long as is necessary to fulfill the aforementioned purposes, as long as statutory or contractual retention periods exist (in accordance with the German Commercial Code (HGB), the German Criminal Code (StGB) or the Fiscal Code of Germany (AO)) or as long as you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

Your data protection rights

As a data subject, you have the right to access your personal data (Art. 15 GDPR), as well as to the rectification of incorrect data (Art. 16 GDPR) or to its erasure if one of the reasons listed in Art. 17 GDPR applies. You also have the right to the restriction of processing if one of the conditions set out in Art. 18 GDPR is met and, in the cases set forth in Art. 20 GDPR, the right to data portability.

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this. Please also note that we may have to store certain data for a certain period of time in order to comply with legal requirements despite your revocation.

In cases where we process your personal data on the legal basis of Art. 6 para. 1 sentence 1 lit. f) GDPR, you have the right to object at any time in accordance with Art. 21 GDPR. We will then no longer process the personal data, unless there are demonstrably compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You can exercise your data protection rights via the following email address: office@datenschutz-sued.de

In addition, as a data subject, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of your data violates data protection regulations. The competent authority is the competent authority in the member state of your habitual residence or in which the controller has its registered office.

Our data protection officer

You also have the right to contact our data protection officer at any time, who is obliged to maintain confidentiality with regard to your request. The contact details of our data protection officer are:


datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Tel.: 0931 3049760
Fax: 0931 304 97610
E-Mail: office@datenschutz-sued.de
Web: www.datenschutz-sued.de

We will be happy to provide you with further information on request.

This is our current valid privacy policy from 01.05.2024