We take the issue of data protection very seriously in order to comply with the General Data Protection Regulation (GDPR) and to protect your data. It is equally important to us to inform you clearly and comprehensibly about how we use and process your data.

The use of our website is generally possible without providing any personal data.

The processing of personal data, such as name or email address, is always carried out in accordance with the General Data Protection Regulation and the applicable country-specific data protection regulations.

Through this Privacy Policy, we provide information about the nature, scope and purpose of the personal data collected, used and processed by us. In addition, data subjects are informed of their rights.

We have implemented technical and organisational measures (TOMs) to ensure the most comprehensive protection possible for personal data processed via this website.

Information on the Collection of Personal Data

In the following, we provide information on the collection of personal data when using our website. Personal data means all data that can be personally related to you, such as your name, address, email address or user behaviour.

The controller within the meaning of Art. 4 para. 7 GDPR is:

Scopeland Technology GmbH
Düsterhauptstraße 39-40
13469 Berlin
Germany
Tel.: +49 (0) 30 209 670-0
Email: info@scopeland.de

When you contact us by email, the data you provide, such as your email address, name and telephone number, will be stored in order to process your enquiry. Depending on the content of the enquiry, the processing is carried out on the basis of:

• Art. 6 para. 1 lit. b GDPR (contract / pre-contractual measures), or
• Art. 6 para. 1 lit. f GDPR (legitimate interest)

We store the data transmitted as part of your enquiry until your matter has been finally processed. If the enquiry results in a contractual relationship, we will continue to store the data in accordance with statutory retention periods. Other enquiries are generally deleted no later than 6 months after completion of the communication, unless legitimate interests prevent deletion.

Your Rights

You have the following rights with regard to your personal data:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent granted

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place. Should this become relevant in individual cases in the future, we will provide separate information in accordance with the legal requirements.

You also have the right to lodge a complaint with a data protection supervisory authority.

Processing of Personal Data When Visiting Our Website

1. Purely Informational Visit

When you use our website for purely informational purposes, only the personal data that your browser automatically transmits to the servers of our service provider ALL-INKL.com is processed.

This includes:

• IP address
• Date and time of the request
• Time zone difference to GMT
• Content of the request
• Access status / HTTP status code
• Amount of data transferred
• Referrer URL
• Browser
• Operating system
• Language and version of the browser software

In addition, our website is configured so that no server logs are created or stored.

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit our website, ALL-INKL.COM processes, on our behalf, the data technically required to provide the website. We have concluded a data processing agreement with ALL-INKL.COM. The legal basis for the use of the hosting provider is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website.

2. Cookies and Consent Management

This website uses the consent management tool “Borlabs Cookie” to obtain and document consent in compliance with the GDPR for the storage of certain cookies on your device or for the use of certain technologies.

The provider is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

When you access our website, a technically necessary cookie is set in order to store the consents you have given or their withdrawal. This data is not passed on to the provider of Borlabs Cookie.

The collected data is stored for as long as this is necessary to document the consent granted or your objection, until you request its deletion or delete the cookie yourself. Mandatory statutory retention periods remain unaffected.

The legal basis for processing in connection with the use of the consent management tool is Art. 6 para. 1 lit. c GDPR for compliance with legal obligations under Section 25 TDDDG.

3. Web Analytics

We use Google Tag Manager and Google Analytics, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Tag Manager is used to manage and deploy website tags via an interface. The Tag Manager itself does not process any personal data and does not set cookies. It merely triggers other tags.

Google Analytics is a web analytics service that enables us to analyse user behaviour on our website. Google Analytics uses cookies and similar technologies to collect information about the use of our website, such as page views, time spent on the website and devices used.

We have activated IP anonymisation, so that your IP address is shortened by Google within the European Union or in other contracting states of the European Economic Area before being transferred to third countries. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The use of Google Analytics and the use of tags via Google Tag Manager are carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. You can withdraw your consent at any time via our consent management tool.

The integration of Google Tag Manager is carried out in the interest of technically error-free and efficient management of our website services and constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Google.

Data processing may also take place in the USA. To the extent that personal data is transferred to companies of the Google group in the USA, the transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. Google LLC is certified under the EU-U.S. Data Privacy Framework. However, it cannot be ruled out that US authorities may gain access to data stored by Google.

Furthermore, the use of Google Analytics is carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.

4. CRM, Marketing and Newsletter Tools

(1) You can register on our website to receive our newsletter. For newsletter registration, the data is processed exclusively on the basis of your consent to receive the newsletter pursuant to Art. 6 para. 1 lit. a GDPR.

(2) We use HubSpot, provided by HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA (“HubSpot”), to send newsletters. HubSpot automatically collects your contact details and the company information of business partners. We store users’ information in our software. Your data is stored on servers within the European Union. To protect your data, we have concluded a data processing agreement with HubSpot.

(3) When sending the newsletter, we process the data you provide on the website, namely your business email address, name of the organisation, first name and last name. The website is linked to HubSpot, so that HubSpot further processes your data after consent has been given in order to send the newsletter to you on our behalf. The data is collected via a form that we create in HubSpot and embed on the website. A double opt-in procedure is provided for newsletter subscribers. Data of persons interested in the newsletter who do not confirm their consent via the confirmation email will be deleted after 48 hours.

(4) In addition, provided you have given separate consent, we store the day and time at which you opened our email and which links you clicked, using a tracking pixel in each email we send to you. The storage of and access to information on your end device is based on your consent pursuant to Section 25 para. 1 TDDDG. The subsequent processing of personal data for analytics and marketing purposes is based on Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. We delete the data arising in this context once storage is no longer required, or restrict processing if statutory retention obligations exist.

(5) You may withdraw your consent at any time informally by email. You will no longer receive newsletters and your data will be deleted within 48 hours.

(6) Personal data may also be processed in the USA. To the extent that personal data is transferred to HubSpot, Inc. in the USA, the transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework. However, it cannot be ruled out that US authorities may gain access to data stored by HubSpot, Inc.

5. Integration of External Content and Services

a) Integration of YouTube – Video Embedding

Videos from the YouTube platform are embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The integration takes place in enhanced privacy mode and is activated only after your consent via our consent tool. As soon as you start a YouTube video, a connection to YouTube servers is established. In doing so, the YouTube server is informed which of our pages you have visited. In addition, YouTube may store various cookies on your device or use comparable technologies.

If you are logged into your YouTube account, you enable YouTube to directly associate your browsing behaviour with your personal profile.

Data processing may also take place in the USA. To the extent that personal data is transferred to companies of the Google group in the USA, the transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. Google LLC is certified under the EU-U.S. Data Privacy Framework. However, it cannot be ruled out that US authorities may gain access to data stored by Google.

The integration of YouTube is carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.

b) Use of Elfsight – Instagram Integration

Widgets from the provider Elfsight are integrated on our website in order to display Instagram content. The provider is Elfsight, SL, AD700 Escaldes-Engordany, C. de la Constitució 17, Andorra.

The integration takes place exclusively after your consent via our consent tool. After activation, a connection to Elfsight servers is established. In particular, your IP address, information about your browser and operating system, and technical usage data may be processed.

Elfsight states that it processes this technical information for the operation of the service, error detection and system security and generally stores it only for seven days. In addition, Elfsight may use the cookie “elfsight_viewed_recently” to limit repeated views.

Processing may also take place outside the European Union or the European Economic Area, in particular where Elfsight uses technical subprocessors. Further information can be found in Elfsight’s privacy policy.

The legal basis for the integration is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. You can withdraw your consent at any time via our consent tool.

6. Multilingualism – Use of WPML

This website uses the WPML plugin, WordPress Multilingual Plugin, to provide multilingual content. WPML uses cookies to store the language selected by the user and to automatically display it again on subsequent visits.

Personal data, in particular technical usage data such as the IP address or cookie identifiers, may also be processed in this context.

The use of technically necessary cookies is based on Section 25 para. 2 TDDDG. To the extent that personal data is processed in this context, this is done on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a user-friendly, multilingual presentation of our online offering.

Further Processing of Personal Data

Online Meetings, Telephone Conferences and Webinars (Zoom)

We use the tool “Zoom”, a service provided by Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA, to conduct online meetings, telephone conferences and webinars.

Personal data is processed in connection with the conduct of these meetings. Depending on the type and scope of use, the following data in particular may be processed: name, email address, meeting metadata, such as date, time, duration and participant IP address, audio, video and chat data, as well as, where applicable, content of shared files or screen sharing.

Depending on the occasion, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication and the conduct of digital meetings) or, where required, on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

If meetings are recorded, we will inform you separately in advance. Recording takes place only with your consent, insofar as this is legally required.

Personal data may also be processed in the USA. To the extent that personal data is transferred to Zoom Communications, Inc. in the USA, the transfer is based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. Zoom Communications, Inc. is certified under the EU-U.S. Data Privacy Framework. However, it cannot be ruled out that US authorities may gain access to data stored by Zoom.

We have concluded a data processing agreement with Zoom pursuant to Art. 28 GDPR.

The data processed in connection with Zoom will be deleted as soon as it is no longer required to achieve the respective processing purpose and no statutory retention obligations prevent deletion.

Links to Other Websites

Our website may contain links to external websites.

When you click on such a link, we no longer have any influence on the processing of your data by the respective provider.

The operator of the linked website is solely responsible for data processing on that website.

Data Protection in Applications

As part of the application process, we use the HR management and applicant management software Personio, a product of Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany.

As part of the application process, you transmit personal data to us, which we use and store exclusively for the purpose of your job search or application. The data is stored and processed in a secure environment.

Personio acts as a processor pursuant to Art. 28 GDPR and processes the data exclusively in accordance with our instructions. The security and confidentiality of the data are ensured by appropriate technical and organisational measures.

Detailed data protection information regarding the processing of your personal data in connection with your application will be provided to you when you use our application form. There you will find, among other things, information on the legal bases, which data is processed and how long we retain the data.

Further information on data processing by Personio is available in the Personio Trust Center at: https://www.personio.de/datenschutz/

Security

We have implemented appropriate technical and organisational measures to protect your personal data.

Our security measures are regularly reviewed and adapted to the state of the art.

Further Information

If you have any questions regarding the processing of your personal data, you may contact us at any time.

The relevant contact details can be found in the legal notice of our website.