Netzkontor

Privacy Policy

1. Privacy at a Glance

General Information

The following information explains the nature, scope, and purpose of the processing of personal data when you visit this website. Personal data refers to any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics which reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

2. Information and Contact Details

We generally collect and use our users’ personal data only to the extent necessary to provide a fully functional website as well as our content and services. The collection and use of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law

Data Controller

The data controller for this website is:

Netzkontor GmbH
, Pariser Platz 6a
, 10117 Berlin

Represented by:
Dirk Müller

Phone: +49 30 300 149 3416
Email: info@netzkontor.de

Data Protection Officer

We have appointed a Data Protection Officer for our company.

B3 Datenschutz GmbH
Andreas Bethke
Papenbergallee 34
25548 Kellinghusen

Phone: +49 4822 366 300-0
Email: DST@netzkontor.de

Purposes and Legal Bases for Processing

We process the data described below to operate our website and to fulfill our contractual obligations to our customers. If you submit inquiries outside the scope of an active contractual relationship, we process the data for marketing purposes. You may object to the use of your personal data for marketing purposes at any time. In order to provide you with our website and the associated services, we process personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR)
  • to fulfill contracts (Art. 6(1)(b) GDPR)
  • Based on a balancing of interests (Art. 6(1)(f) GDPR)
  • To comply with a legal obligation (Art. 6(1)(c) GDPR)

We will refer to the relevant terminology in connection with each specific processing activity so that you can understand the basis on which we process personal data. If personal data is processed based on your consent, you have the right to withdraw that consent at any time with future effect.

If we process data based on a balancing of interests, you, as the data subject, have the right to object to the processing of your personal data, subject to the provisions of Article 21 of the GDPR.

Your Rights as a Data Subject

Applicable data protection law grants you comprehensive rights as a data subject with respect to the controller regarding the processing of your personal data:

You have the right to access the personal data concerning you. To exercise this right, you may contact us at any time to request access.

If a request for information is not made in writing and cannot be verified securely by other means, you should expect us to ask follow-up questions to ensure that you are the person you claim to be.

Furthermore, you have the right to rectification, erasure, or restriction of processing, to the extent permitted by law.

Finally, you have the right to object to processing within the framework of legal requirements. In particular, if you wish to exercise your right to object to the processing of your data based on a balancing of interests, you should expect that we will subject this to a thorough review. We have carefully conducted our balancing of interests in this regard. Therefore, please read Article 21 of the GDPR carefully and expect that we will also ask questions regarding your “specific situation” as defined in Article 21(1) of the GDPR. Finally, you also have a right to data portability. Here, too, this right is granted only within the framework of the statutory requirements.

Right to File a Complaint with the Competent Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

Deletion of Data

We generally delete personal data when there is no longer a need for further storage. A need may exist, in particular, if the data is still required to fulfill contractual obligations or to assess, grant, or defend against warranty and, where applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after the respective retention period has expired.

Data Processing Outside the European Union

Unless otherwise stated, we do not process your personal data in a so-called third country outside the European Union.

3. Data Collection on This Website

Cookies

This website uses so-called cookies in some cases. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary for carrying out the electronic communication process or for providing specific functions you have requested (e.g., the shopping cart function) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be revoked at any time.

To the extent that other cookies (e.g., cookies used to analyze your browsing behavior) are stored, these are addressed separately in this Privacy Policy.

We use cookies

Our website uses cookies to provide you with the best possible service. You can manage your settings below. By clicking “Confirm,” you agree to the use of cookies for this purpose. You can change your settings at any time in the Privacy Policy.

Essentials

Analyses

Tools that collect anonymous data about website usage and functionality. We use this information to improve our products, services, and the user experience.

Confirm
Dismiss
Open settings

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technically error-free display and optimization of its website—to this end, server log files must be collected.

Inquiries via Email, Phone, or Fax

If you contact us via email, phone, or fax, your inquiry—including all personal data contained therein (name, inquiry)—will be stored and processed by us for the purpose of handling your request.

We do not disclose this data without your consent. The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in the effective processing of inquiries directed to us.

The data you send us via contact requests will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

Applicant Data / Application Process

We process applicant data solely for the purpose of and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out to fulfill our (pre)contractual obligations within the scope of the application process pursuant to Article 6(1)(b) of the GDPR. The application process requires that applicants provide us with their application data. This includes personal information, contact details, and the documents related to the application, such as a cover letter, resume, and certificates.

In addition, applicants may voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set forth in this Privacy Policy. Applicants may submit their applications to us via email. However, please note that emails are generally not sent in encrypted form, and applicants must ensure encryption themselves.

We therefore cannot accept any responsibility for the transmission of the application between the sender and our server. In addition to applying via the online form and email, applicants still have the option of sending their application to us by mail. The data provided by applicants will be further processed and stored by us in the event of a successful application for the purpose of administering the employment relationship.

If the application is unsuccessful, the applicant’s data will be deleted. The applicant’s data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Subject to a valid revocation by the applicant, the data will be deleted after a period of six months has elapsed, so that we can answer any follow-up questions regarding the application and fulfill our obligations to provide evidence under the General Equal Treatment Act (AGG).

4. Analytics Tools and Advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s location. This data is associated with the user’s respective device. No association with a user ID takes place.

Furthermore, we can use Google Analytics to track, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the collected data sets and employs machine learning technologies in its data analysis.

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the United States and stored there.

Use of this service is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may revoke your consent at any time.

Data transfer to the United States is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to complying with these data protection standards. You can obtain further information on this from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

IP Anonymization

Google Analytics IP anonymization is enabled. As a result, your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Browser Plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing

We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

5. Plugins and Tools

Google Web Fonts

This site uses so-called web fonts provided by Google to ensure consistent font display. The Google Fonts are installed locally. No connection to Google’s servers is established.

OpenStreetMap

We use the OpenStreetMap (OSM) mapping service. The provider is the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom. When you visit a website that integrates OpenStreetMap, your IP address and other information about your activity on that website are transmitted to the OSMF. OpenStreetMap may store cookies in your browser or use similar tracking technologies for this purpose. Furthermore, your location may be tracked if you have enabled this in your device settings—for example, on your cell phone. The provider of this site has no control over this data transmission. For details, please refer to OpenStreetMap’s privacy policy at the following link: wiki.osmfoundation.org/wiki/Privacy_Policy

The use of OpenStreetMap is in the interest of presenting our online offerings in an appealing manner and making it easy to locate the places we list on the website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be revoked at any time.

6. Privacy Notice for Online Meetings, Conference Calls, and Webinars via “GoToMeeting”

We would like to inform you below about the processing of personal data in connection with the use of “GoToMeeting.”

Purpose of Processing

We use the “GoToMeeting” tool to conduct conference calls, online meetings, video conferences, and/or webinars (hereinafter: “online meetings”). “GoToMeeting” is a service provided by LogMeIn Ireland Limited.

Data Controller

The data controller for data processing directly related to the conduct of “Online Meetings” is Netzkontor GmbH. Note: If you visit the “GoToMeeting” website, the provider of “GoToMeeting” is responsible for data processing. However, accessing the website is only necessary for using “GoToMeeting” in order to download the software required to use “GoToMeeting.” If you do not wish to or are unable to use the “GoToMeeting” app, you can also use “GoToMeeting” via your browser. In this case, the service is also provided via the “GoToMeeting” website.

What data is processed?

Various types of data are processed when using “GoToMeeting.” The scope of the data also depends on what information you provide before or during your participation in an “online meeting.”
The following personal data is subject to processing:
User information: e.g., display name, email address (if applicable), profile picture (optional), preferred language; meeting metadata: e.g., date, time, meeting ID, phone numbers, location; Text, audio, and video data: You may have the option to use the chat function during an “online meeting.” In this context, the text you enter is processed in order to display it during the “online meeting.” To enable video display and audio playback, data from your device’s microphone and, if applicable, its video camera will be processed accordingly for the duration of the meeting. You can turn off the camera or mute the microphone yourself at any time via the “GoToMeeting” applications.

Scope of Processing

We use “GoToMeeting” to conduct “online meetings.” If we intend to record “online meetings,” we will inform you of this transparently in advance and—where necessary—request your consent. If it is necessary for the purpose of documenting the results of an online meeting, we will log the chat content. However, this will generally not be the case. Automated decision-making within the meaning of Article 22 of the GDPR is not used.

Legal Basis for Data Processing

To the extent that personal data of employees of netzkontor nord gmbh is processed, Section 26 of the German Federal Data Protection Act (BDSG) serves as the legal basis for data processing. If, in connection with the use of “GoToMeeting,” personal data is not required for the establishment, carrying out, or terminating the employment relationship, but is nonetheless an essential component of using “GoToMeeting,” then Article 6(1)(f) of the GDPR is the legal basis for data processing. In these cases, our interest lies in the effective conduct of “online meetings.” Furthermore, the legal basis for data processing when conducting “online meetings” is Article 6(1)(b) of the GDPR, provided that the meetings are conducted within the framework of contractual relationships. If no contractual relationship exists, the legal basis is Article 6(1)(f) of the GDPR. Here, too, our interest lies in the effective conduct of “online meetings.”

Recipients / Disclosure of Data

Personal data processed in connection with participation in “online meetings” is generally not disclosed to third parties, unless it is specifically intended for disclosure. Please note that, as with in-person meetings, content from “online meetings” is often intended specifically to communicate information to customers, prospective customers, or third parties and is therefore intended for disclosure. Other Recipients: The provider of “GoToMeeting” necessarily gains access to the aforementioned data to the extent provided for in our data processing agreement with “GoToMeeting.”

Data Processing Outside the European Union

Data processing outside the European Union (EU) generally does not take place, as we have limited our storage locations to data centers within the European Union. However, we cannot rule out the possibility that data may be routed through Internet servers located outside the EU. This may be the case, in particular, if participants in an “online meeting” are located in a third country. However, the data is encrypted during transmission over the Internet and is therefore protected against unauthorized access by third parties.

Changes to This Privacy Policy

We revise this Privacy Policy in the event of changes to data processing or for other reasons that necessitate such revisions. You can always find the most current version on this website.