This data protection declaration informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as 'data') within our website and the websites, functions and content associated with it, as well as external online presences, such as social media profiles (hereinafter collectively referred to as 'online offer'). With regard to the terms used, such as 'processing' or 'controller', we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Person in charge:
MSP human resources GmbH Untere Gasse 64 74564 Crailsheim E-Mail: info [at] msphr.de
Managing Director: Mark Schweitzer-Pullar
Link to the imprint: https://msphr.de/impressum/
Categories of persons concerned:
Visitors to our website (hereinafter we also refer to the data subjects collectively as 'users').
Terms used:
Personal data' means any information relating to an identified or identifiable natural person (hereinafter 'data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The notion is broad and covers practically any handling of data.
Controller' means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Relevant legal bases:
In accordance with Art. 13 DSGVO, I inform you about the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 DSGVO, the legal basis for processing for the performance of our services and implementation of contractual measures and answering requests is Art. 6(1)(b) DSGVO, the legal basis for processing for the performance of our legal obligations is Art. 6(1)(c) DSGVO, and the legal basis for processing for the protection of our legitimate interests is Art. 6(1)(f) DSGVO. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis.
Cooperation with processors and third parties:
If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transfer of data to third parties, such as payment service providers, is necessary for the performance of the contract pursuant to Art. 6 (1) lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called 'order processing contract', this is done on the basis of Art. 28 DSGVO.
Transfers to third countries: If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or do so in the context of using third-party services or disclosing or transferring data to third parties, this only takes place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have data processed in a third country only if the special requirements of Art. 44 ff. DSGVO are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (e.g. for the USA by the 'Privacy Shield') or compliance with officially recognized special contractual obligations (so-called 'standard contractual clauses').
Rights of data subjects:
You have the right to request confirmation as to whether data in question is being processed and to be informed about this data and to receive further information and a copy of the data in accordance with Art. 15 DSGVO.
You have according to. Art. 16 DSGVO the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 DSGVO, you have the right to demand that the data in question be deleted without delay, or alternatively, in accordance with Art. 18 DSGVO, to demand restriction of the processing of the data.
You have the right to obtain the data concerning you that you have provided to me in accordance with Article 20 of the GDPR and to request that it be communicated to other data controllers.
You also have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 DSGVO.
Right of withdrawal:
You have the right to revoke given consents according to Art. 7 para. 3 DSGVO with effect for the future.
Right to object:
You may object to the future processing of data concerning you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against the processing for purposes of direct marketing.
Cookies and right to object to direct marketing:
Cookies' are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Temporary cookies, or 'session cookies' or 'transient cookies', are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online shop or a login jam can be stored. Cookies that remain stored even after the browser is closed are referred to as 'permanent' or 'persistent'. For example, the login status can be stored if users visit them after several days. Similarly, such a cookie may store users' interests, which are used for reach measurement or marketing purposes. Third-party cookies' are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if it is only their cookies, it is called 'first-party cookies').
We may use temporary and permanent cookies and will explain this in our privacy policy.
If you do not want cookies to be stored on your computer, you will be asked to deactivate the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US-American site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.
Configuration of the cookie settings in the browser:
You have the option of preventing cookies from being stored on your computer by making the appropriate settings in the browser itself. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. This can be found for each browser at the following links: Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Safari™: http://apple-safari.giga.de/tipps/cookies-in-safari-aktivieren-blockieren-loeschen-so-geht-s/ and https://support.apple.com/kb/PH21411?locale=de_DE Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Firefox™https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Opera™: http://help.opera.com/Windows/10.20/de/cookies.html
Deletion of data:
The data processed by me will be deleted or restricted in its processing in accordance with Art. 17 and 18 DSGVO. Unless expressly stated in this privacy policy, the data stored by me will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements in Germany, the storage is carried out in particular for 6 years according to § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) as well as for 10 years according to § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
According to legal requirements in Austria, storage is in particular for 7 years pursuant to § 132 (1) BAO (accounting records, vouchers/invoices, accounts, receipts, business papers, statement of income and expenditure, etc.), for 22 years in connection with real property and for 10 years for documents in connection with electronically provided services, telecommunications, radio and television services provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.
Hosting:
We use the services of domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany, for the webhosting of our Internet presence and have concluded an order processing agreement with domainfactory GmbH in accordance with Art. 28 DSGVO. Further information can be found in the data protection declaration of webgo GmbH at https://www.df.eu/de/datenschutz/. The legal basis is our legitimate interest in the operation and maintenance of the operational security of this website in accordance with Art. 6 (1) p. 1 lit. f DSGVO.
Encryption through SSL:
For security reasons, this website uses SSL encryption (Secure Sockets Layer). This protects transmitted data and prevents it from being read by third parties. You can recognize successful encryption by the fact that the protocol name of your browser changes from 'http://' to 'https://' and a closed lock symbol is visible there.
Collection of access data and log files:
The automatic collection and storage of protocol data by the provider of the Internet services (provider) takes place because the processing of this data is technically necessary to display our Internet presence to them and to ensure stability and security. The log data includes the following information:
Date and time of the respective request * Internet address (URL), which was requested * URL, which the visitor visited immediately before * Used browser and language * Used operating system and its surface * IP address and host name of the visitor * Access status / http-status code * In each case transferred amount of data
The transmission of this data to us takes place automatically and cannot be assigned to your person with reasonable effort. The legal basis for the processing of this data is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, because this data processing is necessary for the operation and display of the website. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
Google Web Fonts:
This website uses so-called web fonts ('Open Sans'), which are provided by Google. This is done in order to be able to display fonts uniformly. When you call up a page, your browser loads the required web fonts into your browser cache. For this purpose, your browser does not need to establish a connection to Google's servers in the USA, as we have stored the font locally on our web server. No personal data is processed by third parties as a result.
System and Information Security:
We secure this website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of the stored data by unauthorized persons. Despite controls, however, complete protection against all dangers is not possible. Due to the connection to the Internet and the resulting technical possibilities alone, no guarantee can be given that contents and the flow of information will not be viewed and recorded by third parties.
Objection to unauthorized advertising by e-mail:
Within the framework of the imprint obligation according to § 5 TMG, we have published our general contact data as well as an e-mail address in the imprint and this privacy policy. We hereby object to the use of these contact details for the unsolicited sending of information material, advertising or spam mails that we have not explicitly requested or subscribed to.
Status of the data protection declaration: 01.01.2021