Information on data protection:
The protection of privacy and also the correct handling of personal data is of utmost importance to denkwerk.
With this data protection information, we would therefore like to inform you about the nature, scope and purpose of the processing of personal data. This comprises of our online presence at denkwerk.com, the use of our social media profiles such as Twitter, Vimeo, Instagram and Facebook as well as any other form of digital processing.
The terms used in this privacy notice, such as "processing" or "controller", correspond to the definitions in Article 4 of the General Data Protection Regulation ("GDPR"), which you can read, for example, on the site of the Europäischen Kommission.
***(Note: The General Data Protection Regulation (GDPR) will sometimes be mentioned below in legal terms as the abbreviated form "DSGVO", this is the German abbreviation of of the term "Datenschutzgrundverordnung": Which is the German Data Protection Regulation (DSGVO): Identical to GDPR.)
Before going into the details, we provide a quick summary overview below:
Responsible party (iSd Art. 4 Nr. 7 DSGVO)
denkwerk GmbHVogelsanger Str. 6650823 Köln
E-Mail: hello@denkwerk.com
Data Protection Officer (DPO)
Address: c/o denkwerk GmbH
E-Mail: datenschutzbeauftragter@denkwerk.com
Type of personal data processed:
Inventory data (e.g. names, addresses of contact persons)
Contact data (e.g. e-mail address, telephone numbers)
Contract data (e.g. subject of contract, term, billing address, identification features such as date of birth)
Payment data (e.g. account or bank details, payment history)
Usage data (e.g. log file entries such as user agent, access time, IP address, etc.)
Possible categories of data subjects and affected persons:
Visitors and users of our online offers
Clients, interested parties, business partners, applicants and employees
Subscribers to our newsletter
Individual or cumulative purposes of the processing and the intervening legal grounds
Provision of our online offers, maintenance and improvement of functions and contents (cf. Art. 6 para. (1) lit. b or lit. f or also lit. a DSGVO)
Provision of contractual or pre-contractual services, service and client care (cf. Art. 6 para. (1) lit. b DSGVO)
Requested transmission of information and communications (cf. Art. 6 para. (1) lit. a DSGVO)
Scope of coverage measurement/marketing (cf. Art. 6 para. (1) lit. f DSGVO)
Rights of the data subjects
Right to information Art. 15 DSGVO
Right of rectification Art. 16 DSGVO
Right of objection Art. 21 DSGVO
Right to erasure and restriction of data processing Art. 17 DSGVO
Right to be forgotten Art. 17 DSGVO
Right to data portability Art. 20
Right to complain to supervisory authorities Art. 77 DSGVO
Right to withdraw consent Art. 7 Abs. 3 DSGVO
That was the general overview and now we are happy to explain the details:
When you visit the denkwerk site(s), your browser automatically transmits the following data:
Your IP address
Web pages from which you came (the so-called "referrer")
Date and time of the page views
Your browser type and its version
The operating system of your terminal device
If applicable, the duration of your visit
The temporary storage of this data is necessary to enable the delivery of the website to your computer and to ensure the functionality of the website. We also use this data to gain statistical insights into how our websites are used. In addition, we collect the data in order to be able to trace and prevent unauthorised access to the web server and misuse of the web pages and to secure our information technology systems.
The legal basis for this data processing lies predominantly in the legitimate interest (Art. 6 para. (1) lit. f DSGVO), partly in the fulfilment of a contractual or pre-contractual obligation (Art. 6 para. (1) lit. b DSGVO) or occasionally also in your consent (Art. 6 para. (1) lit. a DSGVO).
As a user, you are the data subject and can object to the future use of your data. You can find more information under the point Widerspruchs- bzw. Widerrufsrecht.
For its online offers, denkwerk uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses cookies, which are stored on the computer of the website visitor and which enable an analysis of the use of the website. The information generated by the cookie such as
IP address
Date and time of the request
Website from which the request comes
Browser
Operating system
are usually transmitted to a Google server in the USA and stored there. denkwerk uses Google Analytics with the extension "_anonymizeIp()"; this means that each IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of denkwerk, Google will use the collected information for the purpose of evaluating the use of the website by visitors, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The deletion of the data is carried out automatically in accordance with the agreement and instructions of the responsible party using the configuration options provided by Google after a period specified by the client.
Cookies used
You can view the cookies used under the following link and also configure them there at the same time:
denkwerk uses the web analysis service Matomo, a free web analysis software available at https://matomo.org/ under the GPL (GNU General Public License). Matomo is used to analyse usage behaviour on our website and to obtain information about the use of the individual components of the website. This enables us to constantly optimise the website and its user-friendliness.
In this context, no cookies for web analysis are set by default; the exception is the technically necessary cookie for switching off all functionality (see Cookie Policy).
The data processing is carried out on the basis of the legal provisions of Art. 6 para.1 lit. f (legitimate interest) of the General Data Protection Regulation (DSGVO).
Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are made anonymous or made pseudonymous as soon as possible. No other use, combination with other data or transfer to third parties takes place.
Matomo is configured in accordance with the specifications for the applicable data protection regulations. You can read information about data protection at Matomo at any time at) https://matomo.org/privacy/.
Cookies used
You can view the cookies used at the following link and also configure them there:
Here you can configure the settings for your cookies. Please note that the website may no longer function correctly if you prohibit all cookies, including those that are technically necessary.
Likewise, the user experience on the pages may be reduced when disabling the technically unnecessary cookies.
It may be technically necessary for your decision regarding the use of cookies to be stored in a cookie again. However, this cookie then no longer has any function beyond that.
If you contact us in any way, the data you provide will be processed to the extent necessary to respond to your request. It will not be passed on to third parties.
In such cases, the processing is understood as the fulfilment of so-called contractual or pre-contractual relations (Art. 6 para. (1) lit. b DSGVO) or serves the legitimate interest of responding to your inquiry (Art. 6 para. (1) lit. f DSGVO).
As the requestor, you are the data subject and can object to the future use of your data. You can find more information under the item. Widerspruchs- bzw. Widerrufsrecht.
We also integrate videos from "Vimeo" on our website via a social plug-in of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA (hereinafter referred to as: "Vimeo").
Through this, personal data is passed on to Vimeo. If you have a user account with Vimeo and are registered, Vimeo can assign the visit to your user account. Vimeo stores this data as usage profiles and uses it for the purposes of advertising, market research and/or tailoring its websites to meet user needs. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website.
You can read details on their use here:. https://vimeo.com/privacy
You have the right to object to the creation of these user profiles. Please contact Vimeo directly for this purpose. You can find details on this under B. II.
We use Vimeo in order to be able to display and offer you content and functions of the Vimeo social platform on our website and thereby improve our offer and the user experience and make it more interesting. This is also our legitimate interest in processing the above information. The legal basis is therefore Art. 6 para. 1 p. 1 lit. f) DSGVO.
If you want to prevent data transfer, you cannot use the functions of Vimeo.
Notwithstanding the above, we recommend that you regularly log out of your user account there in accordance with the use of a social network, as this allows you to avoid an assignment to your profile with the respective provider.
Cookies used:
You can view the cookies used at the following link and also configure them there right away:
denkwerk also maintains profiles within social networks in order to communicate with the users active there, and thus possibly also with you, or to offer information about us there.
Even if it is known to you as a user of such networks, we point out that in the process, data of you as a user could be processed by the operator of the social networks outside the area of the European Union. This could result in risks for the user and make it more difficult to enforce one' s rights.
Providers that are certified under the US or CH Privacy Shield or offer comparable guarantees of a secure level of data protection have thereby committed themselves to comply with the data protection standards of the EU. This enables denkwerk to cooperate.
Insofar as the data of users within social networks is (can be) also processed for market research and advertising purposes, which in turn is outside our sphere of influence, denkwerk refers to the data protection declarations and information of the operators of the respective networks for the details of the respective form of processing and the objection options.
These are in detail:
Operator / service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent Company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Privacy Shield (guaranteeing level of data protection when processing data in the USA): https://www.facebook.com/about/privacy;
Opt-out: Settings for advertisements: https://www.facebook.com/settings?tab=ads; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Data protection information for Facebook pages:https://www.facebook.com/legal/terms/information_about_page_insights_data
Operator / service provider: Vimeo, LLC, 555 West 18th Street, New York 10011; Website: ;https://vimeo.com/de;Privacy policy: https://vimeo.com/privacy
Operator / service provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Website: Privacy Policy: https://twitter.com/de/privacy (settings) https://twitter.com/personalization Privacy Shield (guaranteeing level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
Operator / service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com Privacy Policy: http://instagram.com/about/legal/privacy
Operator / service provider: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, website: https://www.xing.com/legalnotice privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Operator / service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com/ privacy policyhttps://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
denkwerk offers its employees, clients and other interested parties a newsletter at regular intervals. The content of this newsletter includes new trends, general news and other relevant information about denkwerk and its service portfolio.
For the newsletter dispatch, denkwerk uses the service of a newsletter provider (Newsletter2Go). The subscription and un-subscription is done by the interested party itself and directly with this service provider.
denkwerk does not pass on any data directly to this service provider at any time. The data protection declaration of the provider can be viewed here: https://www.newsletter2go.de/datenschutz/
As a subscriber, you are the data subject and have given consent via your registration. The legal basis is therefore Art. 6 para. (1) lit. a and in particular lit. b DSGVO. Of course, you can unsubscribe from a future sending of the newsletter at any time and object to further data processing.
denkwerk stores and processes contact, inventory as well as contract data from its employees to the extent necessary. We also make video and photo recordings of our employees and use these on our intranet or also on our profiles in the social networks. On the one hand, this helps us to recognise each other more easily and, on the other hand, it gives interested parties a first impression of us or a good insight into our thinking and work.
However, before you become an employee, you will go through our application process. For this purpose, you will be contacted by e-mail with your curriculum vitae, various application documents and/or a portfolio of your previous work attached. We save all of this and view it for evaluation and analysis by the respective specialist. During the application process we keep in touch with you via e-mail or telephone. Sometimes we also meet you during the application process and take notes of our conversations and the information exchanged, which are then also stored.
Occasionally, however, contact is also made via a so-called "speed dating event", to which denkwerk invites you from time to time. In this case, we meet with you and other interested parties on our premises and spend some time getting to know each other. Insofar as we take photos or other recordings, we ask you in advance in accordance with your consent and always respect a "no". The decision has no negative influence on our cooperation, neither on the day nor in the further application process that may follow the day.
The legal basis for this is Art. 6 Para. (1) lit. b DSGVO or § 26 BDSG-neu. as well as, in part, Art. 6 Para. (1) lit. c. DSGVO, but in individual cases we also ask for consent and therefore Art. 6 para. (1) lit. a DSGVO (also) applies.
Of course, you as an employee, as an applicant or as any other data subject are free to contact us via our data protection officer at datenschutzbeauftragter@denkwerk.com or also in general at denkwerk at hello@denkwerk.com to find out details or also to object to data processing for the future. denkwerk will then comply with this immediately, whereby the objection or request for deletion requires the existence of a special interest and is restricted by any intervening legal storage or other obligations.
denkwerk stores and processes contact, inventory and contract data of its potential, new and existing customers and their contact persons, but also of suppliers, partners and freelancers (a.k.a. "freelancers") to the extent necessary.
Communication and the exchange of information with them takes place via e-mail or so-called collaboration tools such as Slack, Jira from Altlassian or Confluence. We also manage the data of freelancers in a tool called XING-HelloFreelancer. In this context, we refer to the fact that limited access to denkwerk has been agreed with the service provider and further processing by the service provider or third parties has been contractually excluded (we have provided details on this under the above point B item V).
Disclosure to external parties only takes place if it is required by law or in the context of a contract. If the agreed contractual service comprises of a processing of provided personal data of third parties, we act according to the instructions of the client as well as the legal requirements of a commissioned processing in accordance with Art. 28 DSGVO and do not process the data for any other purposes than the commissioned ones.
The legal basis for this is Art. 6 Para. (1) lit. b DSGVO as well as, in part, Art. 6 Para. (1) lit. c. DSGVO, in very few cases also Art. 6 para. (1) lit. a DSGVO, in which case we explicitly ask you as the data subject for your consent.
Of course, each of these data subjects is free to contact us via our data protection officer at datenschutzbeauftragter@denkwerk.com or otherwise contact denkwerk at hello@denkwerk.com for details, or also to object to the data processing of the respective own data for the future. denkwerk will then comply with this without delay, whereby the objection or the request for deletion is comprehensibly limited by any intervening legal storage or other obligations.
Every data subject may object at any time to future processing of data relating to him or her in accordance with Art. 21 DSGVO. The objection can be made in particular against the processing for purposes of direct advertising.
Also, every data subject has the right to revoke consent once given in accordance with Art. 7 (3) DSGVO with effect for the future.
Data processed by us will be deleted or restricted in its processing in accordance with Art. 17 and 18 DSGVO. Unless we have expressly noted otherwise to you here, data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations or other legal requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
If required due to legal changes or also as soon as changes in the data processing carried out by us make this necessary, we will adapt this notice. Therefore, denkwerk asks you to regularly keep yourself informed about the content. As soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification, we will of course inform you immediately.
(Status of this information: December 2019)