Last updated: November, 2018
This Privacy Notice is intended to inform you how personal data is collected, processed and used when you visit our website.
The provider of the OpenSynergy website www.opensynergy.com is OpenSynergy GmbH, Rotherstraße 20, 10245 Berlin, Germany (hereinafter: “OpenSynergy” or “we”). OpenSynergy is also responsible as defined by the EU General Data Protection Regulation (GDPR) for the collection, processing and use of personal data of website visitors (hereinafter “you”). If you have any questions or suggestions regarding data privacy, please do not hesitate to contact us. You are welcome to address your data protection concerns by e-mail to our data protection officer at datenschutz[at]opensynergy.com. Our complete contact data can be found here.
2.1. Visiting the site. Visiting our website is also possible without providing personal data. Personal data are only collected if this is necessary for technical reasons for the use of our website or if you use certain functions or services offered on our website, such as the contact form or the newsletter registration.
The following information is automatically stored every time you access our website::
The processing of this data is necessary to enable the visit to the website and to guarantee the permanent functionality, availability and security of our systems. The legal basis for this data processing is Art. 6 para. 1 p.1 (b) GDPR.
The access data are also temporarily stored in internal log files for the purposes described above in order to produce statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices used to access the pages increases) and to generally maintain our website administratively. The legal basis for this data processing is Art. 6 para. 1 p. 1 (f) GDPR, based on our legitimate interest in the proper optimisation of our website.
The information stored in the log files does not allow any direct inferences to be made regarding your person – in particular, we only store the IP addresses in an abridged, anonymised form. The log files are stored for 7 days and archived after subsequent anonymisation.
2.2. Newsletter. You have the opportunity of subscribing to our newsletter, which informs you regularly about innovations to our technologies, products and solutions and possibilities for their use. When registering, we ask you to provide your name so that we can contact you and your e-mail address so that we can send you the newsletter. You also have the option of providing further voluntary information.
We use the so-called double opt-in procedure, i.e. we shall only send you information by e-mail if you confirm that you are the owner of the e-mail address provided by clicking on a link in our notification e-mail. If you confirm your e-mail address, we shall store your e-mail address, the time of registration and the IP address assigned at registration until you unsubscribe from the newsletter. The sole purpose of storing this information is to send you the newsletters and to provide proof of your registration. You can unsubscribe at any time. A corresponding unsubscribe link can be found in every e-mail. A message to the contact data given above or in the individual e-mails (e.g. by e-mail or letter) is of course also sufficient. The legal basis of the processing is your consent in accordance with Art. 6 para. 1 p.1 (b) GDPR
We use your voluntary registration data anonymously, i.e. without reference to your person, in order to be able to statistically evaluate which industries our readers come from. This helps us to further optimise the contents of our newsletter. The legal basis for this data processing is Art. 6 para. 1 p. 1 (f) GDPR, based on our legitimate interest in the appropriate further development of our newsletter content.
2.3. Contact form. We offer you the opportunity of sending us messages directly via a contact form. For this, you must provide an e-mail address where we can contact you. We will also ask for your name to be able to address you. We will process the information you provide on the contact form to respond to your request. In order to process your request properly, we may disclose the data provided on the contact form to one of the regional sister companies or sales partners named on the contact page. This takes place when the distribution company responsible for your region or the topic mentioned in the enquiry can answer your enquiry more appropriately. The legal basis of the described data processing is Art. 6 para. 1 p.1 (b) GDPR. The data collected when using the contact form will be automatically deleted after processing your request.
2.4. Google Maps On our contact page we use Google Maps to visually display the address of our location. Google Maps is a map service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). In order for the Google map material we use to be integrated and displayed in your browser, when you visit the contact page your browser must connect to a Google server, which may also be located in the USA. In the event that personal data is transferred to the USA, Google has undertaken to comply with the EU-US Privacy Shield. When you visit our site, Google receives the information that our website has been accessed from the IP address of your terminal device. The legal basis for data processing is Art. 6 para. 1 p. 1 (f) GDPR, based on our legitimate interest in integrating a map service as part of the design of our website.
2.5. Application via the online form. You can apply for positions vacant with us using our online form. The purpose of this data collection is the selection of applicants for the possible establishment of an employment relationship. We collect the following data for receiving and processing your application: First and last name, e-mail address, application documents (e.g. certificates, CV, covering letter). The legal basis for processing your application documents is Art. 6 para. 1 p. 1 (b) and Art. 88 para. 1 GDPR in conjunction with German Privacy Law (§ 26 para. 1 p. 1 BDSG). We store your personal data upon receipt of your application. If we accept your application and an employment relationship becomes established, we store your applicant data as long as these are necessary for the employment relationship and as far as legal regulations justify an obligation for storage. If we reject your application, we shall store your application data for a maximum of three months after the rejection of your application, unless you grant us your consent to a longer storage period. If you have granted us your separate consent, we shall store the data you have provided in the application in our applicant pool for a further twelve months after completion of the application procedure in order to identify any other interesting positions for you and to contact you again if necessary. After expiry of this period, the data will be deleted. You may revoke this consent at any time in the future by sending an e-mail to jobs[at]opensynergy.com
The main purpose of our own cookies is rather to make the use of our services as time-saving and user-friendly as possible.
We use our own cookies in particular
We wish to enable you to use our website more comfortably and individually. The processing of the respective cookies is based on our aforementioned legitimate interests; the legal basis in this respect is Art. 6 Para. 1 p.1 (f) GDPR.
You can prevent the storage of cookies by preventing the acceptance of cookies via this website in your web browser settings. If you do not accept cookies, however, in individual cases this can lead to considerable restrictions in the functionality of our website.
The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Since IP anonymisation is also activated on this website, your IP address will be shortened before it is transferred to the USA within the European Union or in other states party to the Agreement on the European Economic Area. In the event that personal data is transferred to the USA, Google has undertaken to comply with the EU-US Privacy Shield .
The legal basis for the described data processing is Art. 6 para. 1 p. 1 (f) GDPR, based on our legitimate interest in the demand-oriented design and continuous optimisation of our website. The data collected using Google Analytics is stored for a period of 38 months and is then completely deleted or made anonymous.
You can prevent the collection of data generated by the cookie relating to your use of our website and the processing of this data by Google on all websites, by downloading and installing a browser add-on provided by Google (the add-on does not work with mobile devices).
You can also prevent Google from collecting your data via the cookie settings.
If you visit our website with a mobile device, please use the following link to prevent Google from collecting your data on this website: Disable Google Analytics
Please note that you must perform the opt-out again if you use a different device or browser.
Our website may contain links to the websites and online offerings of other providers not affiliated with us. If you click on these links, we naturally no longer have any influence on what data is collected by the respective providers and what data is stored by them. For details on data collection and the use of data, refer to the privacy notices of those websites. Since the collection and processing of data by third parties is beyond our control, we cannot assume any responsibility for this.
The data collected by us will only be shared if:
Part of the data processing described in this privacy notice may be carried out by our service providers. In addition to the service providers mentioned in this Privacy Notice, this may include data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. If we pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of the persons concerned, guarantee an appropriate level of data privacy and are carefully monitored by us.
In addition, disclosure may take place in connection with official inquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.
You have the right to request information about the processing of your personal data by us at any time. We shall explain how the data is processed and provide you with an overview of the data stored concerning your person as part of the provision of information.
If data stored with us is incorrect or no longer up-to-date, you have the right to have this data corrected.
You may also request that your data be deleted. If, in exceptional cases, deletion is not possible due to other legal regulations, the data will be blocked so that they are only available for this legal purpose.
You may also have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect. You also have the right to data transferability, i.e. on request we shall send you a digital copy of the personal data you have provided.
In order to exercise your rights as described here, you may contact us at any time using the contact details mentioned in paragraph 1 above. This also applies if you wish to receive copies of guarantees to prove an adequate level of data privacy.
In addition, you have the right to object to the data processing described in Art. 6 para. 1 p. 1 (e) or (f) GDPR. Finally, you have the right to complain to the supervisory data protection authority to which we are accountable. You may exercise this right before a supervisory authority in the member state in which you reside, work or where the suspected infringement takes place. The responsible supervisory authority in Berlin is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstrasse 219, 10969 Berlin.
Right of withdrawal and objection.
In accordance with Article 7 para. 2 GDPR you have the right to revoke the consent you have given to us at any time. As a result, we are no longer allowed to continue the data processing that is based on this consent in the future. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.
Insofar as we collect your data on the basis of legitimate interests pursuant to Art. 6 Para. 1 (f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your data and to give us reasons which arise from your particular situation and which in your opinion speak for a predominance of your interests that are worthy of protection. If you object to data processing for direct marketing purposes, you have a general right of objection, which we shall also implement if you do not give reasons.
If you would like to make use of your right of revocation or objection, an informal message to the above-mentioned contact data is also sufficient.