Privacy Policy

Thank you for your interest in our company. As a website operator, we take the protection of your personal data very seriously. Your personal data will be treated confidentially and according to the legal regulations.

Our website can be accessed without providing your personal data. If at any time personal data such as name, e-mail or address are requested, this is done on a voluntary basis. Without your specific permission, data will not be disclosed to third parties.

Internet data transmission, such as by e-mail, can always have security gaps. The complete protection of your data on the Internet is not possible.

General data protection regulations

The use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information material is hereby expressly prohibited. Excepted from this are existing business relationships or you have a corresponding consent from us.

The providers and all third parties mentioned on this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information. The same applies to the commercial use and disclosure of data.

Responsible in the sense of the DSGVO

The following entity is responsible for the processing of your personal data within the meaning of Art. 4 No. 7 DSGVO:

Change IT Solutions GmbH
Doreen Dahlmann
Habsburgerstrasse 33
79104 Freiburg im Breisgau
info@change-it-solutions.com

For further information please refer to the imprint.

Data protection officer

The data protection officer of the responsible party is:

Doreen Dahlmann
Habsburg street 93
79104 Freiburg im Breisgau
doreen.dahlmann@change-it-solutions.com

General information on data processing

1. Scope of data

Personal data is processed only to the extent required for the provision of our service or the provision of a functional website. In principle, the prior consent of the user is obtained for this purpose. Exceptionally, the prior express consent of the user is dispensable if the data processing is permitted by law and the consent of the user cannot be obtained for factual reasons.

2. Legal basis

The processing of personal data is based on Art. 6 (1) of the EU General Data Protection Regulation (DSGVO).
In detail, it is carried out on the basis of:

  • Art. 6 (1) lit. a DSGVO, insofar as the consent of the data subject has been obtained for this purpose;
  • Art. 6 (1) lit. b DSGVO, insofar as the data is required for the performance of a contract or for the implementation of pre-contractual measures to which the data subject is a party;
  • Art. 6 (1) lit. c DSGVO, insofar as the processing is necessary for compliance with a legal obligation;
  • Art. 6 (1) (d) DSGVO, insofar as the processing is necessary for the vital interests of the data subject or another natural person;
  • Art. 6 (1) lit. f DSGVO, insofar as the processing is necessary for the protection of a legitimate interest of our company or a third party and these interests override the fundamental rights and freedoms of the data subject.

3. Deletion and duration

Personal data is stored for as long as the purpose on which it is based continues to exist or the storage is permissible in terms of time according to European or national legal regulations. If the processing purpose ceases to exist or a legally prescribed storage period expires, the personal data will be deleted or blocked, unless the storage is still necessary for the conclusion or fulfillment of a contract.

Website and log files

1. Description and scope of data processing

Each visit to our website leads to an automatic collection of data and information from the system of the calling computer.
In detail, the following data is collected:

  1. browser type and version used
  2. operating system of the user
  3. internet service provider of the user
  4. IP address
  5. date and time of access
  6. web pages via which the user accesses our website
  7. web pages that the user accesses via our website

The log files do not contain any IP addresses or other data that allow an assignment to a user:
This data is stored in the log files of our system. However, the storage does not take place together with other personal data of the user. Excluded from the storage are the IP addresses of the user or other data that allow an assignment to the user.

2. Legal basis

The temporary storage of the data is based on Art. 6 para. 1 lit. f DSGVO.

3. Processing purpose

The user’s IP address is temporarily stored for the duration of the session so that the website can be delivered to the user’s computer.
These processing purposes constitute a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

4. Deletion and duration

Data is stored for as long as the purpose for which it was collected continues to exist. The data collected for the provision of the website will be deleted as soon as the respective session has ended.

5. Possibility of objection

The user has no possibility to object, as the data collection and the data storage in the log files are necessary for the provision and operation of the website.

Cookies

Cookies are used when visiting our website. Cookies facilitate the exchange of data between your terminal device and our website. By means of small text files, which are deposited and stored on the end device used by you, the login status or language settings of a website can thus be transmitted, for example.

We use the following types of cookies:

  • Temporary cookies: this stores a session ID that associates your browser requests with a particular session. As soon as you log out or close the browser, these temporary cookies are deleted.
  • Permanent cookies: This documents your surfing behavior. This makes it possible for our website to recognize your computer – including language and log-in information – when you visit again. Permanent cookies remain stored even after you close your browser.

Cookies can also be differentiated according to their underlying storage purpose:

  • Necessary cookies: these are mandatory for security reasons or for the functional operation of our website for the duration of your session.
  • Statistical, marketing, personalization cookies: These evaluate the user’s surfing behavior and serve to display content of interest to the user, as well as to analyze and measure the reach of the website operator. These “tracking cookies” document in particular the search terms entered or the frequency of page views. With regard to the respective statistics, marketing and personalization cookies used, you will be informed in more detail in the following sections of this privacy policy.

Affected: Users of our website

Data concerned:

  • Usage data (e.g. web pages clicked on).
  • Communication data (e.g. information on the IP address).

Purpose of processing: ensuring the operation of our websites, playing out our websites; optimization and marketing purposes.

Legal basis:

  • Consent, Art. 6 para. 1 lit. a DSGVO: When visiting our website, you will be asked to give your consent to the use of cookies. If you refuse consent, only the technically necessary cookies will be used. Once given consent, can be revoked at any time.
  • Legitimate interest, Art. 6 para. 1 lit. f DSGVO: If you have not given your consent to the use of cookies, your data will be processed to the extent that there is a legitimate interest in the quality and user-friendliness of our website. In this regard, you also have the option via the browser settings to object to the use of cookies within the scope of our legitimate interest or to restrict the use of permanent cookies. In case of a complete deactivation of cookies, however, a smooth use of the website can no longer be guaranteed.

Data subject rights and right of appeal

With regard to the protection of your personal data, you are entitled to various rights under the GDPR. You can assert these rights with the data protection officer. In detail, you have the following rights:

  • Right to information and transfer: you can request information about whether and which data has been collected and processed. At your express request, your data must be transferred in a structured, common and machine-readable format.
  • Right to rectification: You can request that incorrect data be corrected or that incomplete data be added.
  • Right to erasure: You can demand the erasure of your data at any time.
  • Right to restriction: Under certain conditions, you can demand that we only process your data in a restricted manner.
  • Right of appeal: You also have the right to appeal to the supervisory authority responsible for you. The jurisdiction depends on our registered office, your usual place of residence or your place of work.
  • Right of revocation: You can revoke your consent to data processing in part or in full at any time. Insofar as the revocation concerns data processing on the basis of Art. 6 Para. 1 lit. f DSGVO, the revocation must be justified in writing. If it is not proven on our part that compelling reasons worthy of protection outweigh your interests and rights with regard to the data processing, the processing of your personal data will be discontinued immediately.

Irrespective of this, you can object to the processing of your personal data for advertising and data analysis purposes at any time – even without giving reasons.

Deletion of your data

Your data will be deleted – unless otherwise stated in this privacy policy – if:

  • you exercise your right of deletion, restriction or revocation and the permissibility of further processing does not result from Art. 6 (1) lit. b-f DSGVO;
  • the underlying purpose for the data collection has been achieved or has ceased to exist, in particular if the contractual relationship pursuant to Art. 6 (1) a DSGVO has ended or the legitimate interest within the meaning of Art. 6 (1) f DSGVO in the further processing has ceased to exist.

Specifically, deletion may only take place at a later point in time if the (partial) storage of your data is necessary for the fulfillment of other purposes. This concerns in particular compliance with retention periods under tax law (6 or 10 years) or the assertion and defense of claims arising from contractual relationships (4 years), as well as the protection of the rights of third parties. Until the expiry of these periods, the data will then only be stored to the extent required for the fulfillment of the retention obligations.

Adjustment clause

Our privacy policy can be adapted at any time to comply with current legal requirements or to implement changes to our services. The latest version is valid for each visit.

Hosting of the website

We use a provider to host our website. Our web pages are stored on their server and are available for retrieval on the Internet (hosting). The provider may process all data transmitted via your browser that is required when using our web pages, your entries or IP address all entries made by you via our website.

The provider may collect the following:

  • Your input
  • your IP address and your access status (HTTP status)
  • the amount of data
  • the Internet service provider of the accessing system
  • your browser type and version as well as your operating system
  • the date and time of your access to the website as well as the time zone difference GMT
  • the website from which you have accessed our website and the web pages you visit on our website.

This data is stored as log files on the provider’s servers to ensure the operation of our website.

Affected: Users of our website

Data concerned:

  • Content data (e.g. photos, videos).
  • Usage data (e.g. web pages clicked on)
  • Communication data (e.g., IP address information).

Purpose of processing: ensuring the operation of our websites, playing out our websites.

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f DSGVO.

Hosting of the website: STRATO

Provider: STRATO AG, Pascalstr. 10, 10587 Berlin, Germany.
Website: https://www.strato.de/hosting/
Privacy policy: https://www.strato.de/datenschutz/

Social Media

We have profiles with the following social media providers. When visiting, the provider collects and processes the data listed below. This data is regularly collected for advertising and market research purposes. In the profiles, data is regularly stored regardless of your device. You will regularly receive customized advertising. To cancel a user profile, you have a right of withdrawal from the respective provider. The provider may collect data about your usage behavior on our website when you visit our website if you are logged in to it. You can log out of the provider before visiting our website to prevent this. For what purpose and to what extent data is collected by the provider, you can see the respective privacy statements of the providers.

Depending on the location of the provider, the data collected by the provider may be transferred and processed outside the European Union. There is a risk of non-compliance with the level of data protection prescribed by the GDPR. The enforcement of your rights may also be prevented or made more difficult.

Data concerned:

  • Inventory and contact data (e.g., name, address, telephone number, e-mail address).
  • Content data (e.g. photos, videos)
  • Usage data (e.g. web pages clicked on)
  • Communication data (e.g., IP address information).

Purpose of processing: tracking and analysis of user behavior, communication and marketing.

Legal basis: consent, Art. 6 para. 1 lit. a DSGVO, legitimate interest Art. 6 para. 1 lit. f DSGVO.

Opt-out options: For objection options (opt-out), please refer to the information of the providers linked below.

We have profiles on the following social networks:

LinkedIn

Provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA.
Headquarters in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich, Germany
Website: https://www.linkedin.com/
Privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Contact(form)

We process your contact data to answer your contact inquiries within the scope of the respective existing (pre-)contractual relationship, insofar as you provide it to us via our contact form, telephone, email, mail, fax or social media. The same applies to other information about your request or your person.

Affected: (potential) customers, business and contractual partners.

Data concerned:

a) Inventory data (e.g. name, date of birth).
b) Contact data (e.g. address, e-mail, telephone number)
c) content data (texts, photos, videos)
d) Contract data (e.g. subject matter of the contract, duration of the contract).

Purpose of processing: answering contact requests, office and organization.

Legal basis: contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b DSGVO, legitimate interest, Art. 6 para. 1 lit. f DSGVO.

Applicant data

The applicant data you send us (e.g. personal details, photo, contact data, career history) will be processed by us in the application process. Data sent by e-mail is always transmitted unencrypted. Entries via our contact form are encrypted according to the state of the art. Applicant data transmitted online is processed exclusively electronically. If the application process leads to an employment relationship with us, your data will be stored for further processing of the employment relationship. The data protection regulations will be observed. In the event that the application process ends with a rejection, your data will be deleted no later than 2 months after the rejection is sent. Exceptionally, the data will be stored beyond this if this is provided for by legal regulations or if storage is necessary for evidence purposes within the framework of compliance with the General Equal Treatment Act.

Purpose of processing: communication and implementation of the application process.

Data subject: potential future employees

Data concerned:

  • Usage data (e.g. web pages clicked on).
  • Inventory and contact data (e.g. name, address, telephone number, e-mail address)
  • Contract data (e.g. subject matter of contract, term of contract)
  • Payment data (e.g. bank details)

Legal basis: Art. 6 para. 1 lit. b DSGVO, Art. 6 para. 1 lit. c DSGV