Privacy policy

With this data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data are all data that have a personal reference to you, e.g. name, address, e-mail address or user behaviour.

Who is responsible for data processing on our website

Responsible for the data processing:

SONEM Solutions Ltd.
Sebastian Minning
Gutenbergstrasse 21
86399 Bobingen
Germany
info[at]sonem.org
Link: www.sonem.org/impressum/

Processing of your data within the scope of the core activity of our company

We process your personal data transferred to us within the scope of the contractual and pre-contractual relations existing between us. The scope, type, purpose and necessity of the processing is determined by the underlying contractual relationship. For this purpose we store and process your data in the computer systems we use. The data processed by us includes all those data which have been provided by you for the purpose of using the contractual or pre-contractual services and which are required to process your enquiry or the contract concluded between us.

This may include the following data in particular:

Name and address
E-mail address and telephone number
Contract data
Payment details.

The processing is limited to those data which are necessary and expedient for answering inquiries and/or for fulfilling a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or within the framework of the organisation of our company for the handling of financial accounting and compliance with legal obligations. In this case, only those data will be transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of financial accounting as well as the compliance with legal obligations. The processing by us is carried out in accordance with your instructions or the statutory provisions. Legal basis: The processing of your personal data as well as the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) DSGVO and serves to fulfil the contract between you and us. Otherwise, we will only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) DSGVO or if there is a legitimate interest in doing so, Art. 6 para. 1 lit. f. DSGVO. This is the case, for example, if this is necessary to pursue our claims. Deletion: Your data will be deleted as soon as the data is no longer required for the fulfilment of contractual or statutory duties of care and for dealing with any warranty and comparable obligations. This does not affect the statutory storage obligations.

Web hosting

We use an internet service provider to maintain our online presence, on whose server the website is stored (hosting) and who makes our site available on the internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data, meta and communication data on our behalf. Legal basis: The internet service provider processes the above-mentioned data on our behalf, Art. 28 DSGVO. The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO.

Details of the contact details we hold on you

If you contact us via e-mail, social media, telephone, fax, post, our contact form or in any other way and provide us with personal data such as your name, telephone number or e-mail address or provide further information about your person or your request, this data will be stored and processed by us for the purpose of processing your request. Legal basis: If you have made your request via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. If you make your inquiry within the framework of contractual or pre-contractual relations with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b. DSGVO. If your enquiry does not fall into one of the aforementioned categories, our legitimate interest in processing your data is to answer your enquiry properly and in your interest, Art. 6 para. 1 lit. f. DSGVO. Deletion: The personal data collected by us will be deleted if they are no longer required. We review the necessity every 2 years. You can also revoke the data processing at any time.

The handling of your data in the application procedure

If you apply for a job with us, we process the personal data that you provide to us during the application process. If you send the data by e-mail or via a contact form of our online presence, the processing is carried out electronically. If a contract of employment is concluded after the application procedure, we will store your data for the purpose of processing the employment relationship in accordance with the statutory provisions. Purpose: The purpose is to process the application procedure. Legal basis: The legal basis for the processing of your data for the purpose described above is Art. 6 para. 1 lit. b DSGVO. Deletion: If an employment contract is not concluded, your data will be deleted after completion of the application procedure or at the latest 2 months after its conclusion. This does not apply if legal provisions prevent deletion or if further storage of your data is necessary for the purpose of providing evidence, for example in proceedings under the General Equal Treatment Act (AGG). The application procedure is deemed to be completed with the dispatch of the rejection to you. Prevention: In addition, you have the right to withdraw your application or demand the deletion of your personal data at any time.

Blog

You have the opportunity to comment on the posts we have posted on our blog. Since we can be held liable for infringing contents (insult, abusive criticism, sedition, forbidden violence, etc.) of your comment under certain circumstances, we save your IP address for a period of 7 days in order to be able to determine your identity. Legal basis: The legal basis for the storage of your data is Art. 6 para. 1 lit. f DSGVO. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 14 days. Prevention: You can prevent the storage of the IP address by not making any comments.

Registration

You have the possibility to register on our website and create a user account to access specific content on our website. For this purpose, it is necessary to enter personal data, which is derived from the input mask. The data requested there include in particular your name, password and e-mail address. This data is stored and processed by us to enable you to access your user account. The data can be changed or deleted by you at any time. The data will not be passed on to third parties unless they are used for the purpose of contract processing. In order to protect you and us from abusive registrations, we store the IP address used during registration as well as the date and time of registration. These data will not be passed on to third parties. Legal basis: We process your data on the basis of Art. 6 para. 1 lit. b DSGVO for the purpose of providing your user account. Deletion: The personal data, as well as IP address, date and time are stored until the purpose for which they were collected ceases to apply. The deletion of data collected during registration is carried out as soon as the corresponding account on our website is deleted or changed: You can delete your account at any time or request the deletion by the above mentioned data controller.

We send out a newsletter at regular intervals to inform our customers and business partners and interested parties about our offers and related news. You have the possibility to register for our newsletter on our website and to agree to receive the newsletter within the scope of the registration. If you register for our newsletter, it is obligatory to provide your e-mail address. We store the e-mail address in order to send you the newsletter. The provision of further data such as title or name is voluntary and is used to address you personally. As soon as you register for our newsletter, you will receive a confirmation e-mail to the e-mail address you entered during registration using the so-called double opt-in procedure. This e-mail contains a link. If you click on this link, you confirm that you wish to receive the newsletter. This is to ensure that your e-mail address has not been misused by a third party during registration. For the same reason, we save the date and time of registration as well as the IP address assigned to you upon registration. We do not pass on the aforementioned data to third parties. Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO.

Deletion: The e-mail address is deleted either if you have not clicked on the confirmation link 1 month after sending the confirmation e-mail in the double opt-in procedure or immediately after you have unsubscribed from our newsletter. Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options for you to revoke your consent:

Click on the link provided in the newsletter
Form on our website
through the contact data provided in the imprint of our website

Evaluation of the user behaviour

If you have agreed to this, we will evaluate your user behaviour when sending the newsletter. For this purpose our newsletter contains tracking pixels and tracking links. This enables us to recognize if and when you have opened the newsletter and if and which links you have clicked on in the newsletter. Purpose: We evaluate the newsletter as described above to be able to measure a statistical evaluation of the success or failure of our newsletter. Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. Prevention: You can revoke your consent to receive the newsletter at any time by using the above-mentioned options. Deletion: We delete your data after revocation.

Your rights under the DSGVO

According to the DSGVO, you are entitled to the rights listed below, which you can assert at any time with the person responsible named in section 1 of this data protection declaration:

Right to information: In accordance with Art. 15 DSGVO, you can request confirmation as to whether and which of your personal data we are processing. In addition, you may request from us, free of charge, information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, and the origin of your data, if not collected by us. Furthermore, you have the right of information as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to obtain information about the appropriate guarantees in connection with the transfer.
Right of rectification: In accordance with Art. 16 DSGVO, you have the right to request the correction of incorrect or incomplete personal data stored by us and concerning you.
Right to deletion: In accordance with Art. 17 DSGVO, you have the right to request the deletion of your personal data stored with us, unless we need to process them for the following purposes:
to fulfil a legal obligation,
to assert, exercise or defend legal claims,
to exercise the right to freedom of expression and information, or
for reasons of public interest as referred to in Art. 17 para. 3 lit. c and d DSGVO.
Right to limitation: Pursuant to Art. 18 DPA, you have the right to request limitation of the processing of your personal data if
the accuracy of the data is contested by you, for a period of time that allows us to verify the accuracy of the personal data,
the processing of your data is unlawful, but you refuse to have it deleted and instead demand that the use of the data be restricted,
we no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims
you have lodged an objection to the processing of your data in accordance with Art. 21 DSGVO, but it is not yet clear whether the legitimate reasons which, despite your objection, entitle us to further processing outweigh your rights.
Right to information: If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the correction or deletion of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us of these recipients.

Right to data transferability: In accordance with Art. 20 DSGVO, you may request that we receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or request that it be transferred to another responsible party.
Right of complaint: Under Art. 77 DSGVO you have the right to complain to a supervisory authority. To do so, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.

Right of withdrawal

According to Art. 7 para. 3 DSGVO you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data up to the revocation.

Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you on the basis of a balancing of interests (Art. 6 para. 1 lit. f DSGVO). This is particularly the case if the data processing is not necessary for the performance of a contract. If you make use of your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.

Irrespective of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the contact address of the person responsible stated above.

Our online presence in social networks

We operate online presences within the social networks listed below. If you visit one of these sites, your usage data is collected and processed by the respective provider. This is usually done by cookies, which are stored on the end device you use. For the term “cookies”, see above under the corresponding heading. Cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. In addition, data can be stored in the user profiles regardless of the device you use. This is especially the case if you are a member of the respective platform and logged in to it.

The collected data is generally used by the provider for advertising and market research purposes by creating user profiles from your usage behaviour. These in turn can be used by the providers to provide you with interest-related advertising. You have a right of withdrawal against the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. In order to prevent such a linking of your data, you can log out of the provider’s service before visiting our site.

For which purpose and to what extent data is collected by the provider, you can see the respective data protection declarations of the provider, which are provided below. We ourselves have no influence on which data is collected and how this data is used by the provider. If you wish to request information or exercise your rights as a data subject, you can do this most effectively with the respective provider, as only the respective providers have access to your data.

We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data subject rights may be made more difficult. Those US providers who are certified under the Privacy Shield have undertaken to comply with EU data protection standards. You will find information on whether the respective provider has such a certificate in the information on the providers listed below.

Legal basis: If you have been asked by one of the providers listed below to give your consent to data processing, the legal basis for processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the processing of your data is based on our legitimate interests in contacting and communicating with you, Art. 6 para. 1 lit. f. DSGVO. Prevention: For the respective possibilities of objection (opt-out) we refer to the following linked information of the providers.

We maintain online presences on the following social networks:

XING

XING is a service of XING AG, Gänsemarkt 43, 20354 Hamburg – Germany

LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 – USA

EU headquarters: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich – Germany

Privacy policy available at: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Facebook

Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 – USA.

Headquarters in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland

Privacy policy available at: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Google AnalyticsWe use “Google Analytics” on our website, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically evaluate the streams of visitors to our website. Among other things, Google Analytics collects data on which website you came to our website from (so-called referrers), which sub-pages of the website you accessed or how often and for how long a subpage was viewed and which interactions you made. In order to collect and store this data, Google Analytics places a cookie on the terminal device you use (see the term “cookies” above). We use the AnonymizeIP function to make your IP address anonymous so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to the anonymised IP address by Google or linked to it. The information thus generated is transferred to Google’s servers in the USA and stored there. Google may pass on this personal data collected via the technical process to third parties. We have concluded an order processing contract with Google. According to this agreement, Google is entitled and obliged to evaluate the information obtained for us and to prepare statistical reports for us on the type and extent of website use. These statistics enable us to constantly improve our offer, to carry out a cost-benefit analysis of our internet marketing and to make our internet presence more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics because of our legitimate interest in the analysis, optimisation and economic operation of our online offer, Art. 6 para. 1 lit. f DSGVO. Deletion: The data collected and transferred by us in this way are automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all the functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent data from being collected from you on our website in the future. Please click on the following button. You also have the option of preventing the storage of cookies by setting this in your browser. Cookies that have already been set can be deleted by you at any time.

Information about the third party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of use: http://www.google.com/analytics/terms/de.html
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy
Data usage by Google when you use websites or apps of our partners:https://www.google.com/intl/de/policies/privacy/partners
Use of data for advertising purposes: http://www.google.com/policies/technologies/ads
Personalized advertising by Google: http://www.google.de/settings/ads
Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and has been certified.

Google thereby undertakes to comply with the standards and regulations of European data protection law. For more information, please refer to the entry linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Akismet

We use “Akismet” on our website, a service provided by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA.

Akismet is used to filter the comments made by users and to identify and treat comments that are considered “spam”. For this purpose, the comments you submit are transmitted to Automattic Inc.’s external servers in the USA and analyzed. In addition, the following data will be transmitted and also processed: Your e-mail address, your IP address, the content of the comment, information about your browser, your operating system, the time of submission of the comment as well as information about which website you have visited before (referrer). Automattic is a party to the Privacy Shield Agreement and is certified to process data according to European standards. No data processing is carried out by us. Purpose: The service is used to treat comments classified as spam and to prevent their publication. Legal basis: We use Akismet because of our legitimate interest in the secure and efficient provision and optimization of our online offer, Art. 6 para. 1 lit. f DSGVO. Deletion: Comments and related data are automatically deleted from the server by Automattic Inc. after four days. If a comment was classified as spam, it will be stored beyond this period. Prevention: You can prevent the transmission of individual data by not specifying them when submitting a comment. In addition, you are free not to use the comment function to prevent a complete data transmission.

Information about the third-party provider:

Security measures

We also take technical and organizational security measures in accordance with the state of the art in order to comply with the provisions of the data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

Up-to-dateness and amendment of this data protection declaration

This data protection declaration is currently valid and has the status of April 2020. Due to changed legal or official requirements it may be necessary to adapt this data protection declaration.

This data protection declaration was created with the help of SOS Recht. You can find the data protection declaration generator here. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.