Privacy policy of wdp GmbH

4. Data processing

The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

a) Log file during website visit

We log your website visit. In doing so, we process:

• name(s) of our accessed website(s),
• date and time of access,
• the amount of data transferred,
• the browser type and version,
• the operating system used by you
• the referrer URL (the previously visited website),
• your IP address,
• the requesting provider.

The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website in accordance with Art. 6 (1) f) DSGVO.
The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.

b) Hosting

To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.

The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 (1) f) DSGVO.

c) Contacting us

If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details -if provided by you- and your message.

The legal basis for the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para. 1 b) DSGVO and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) DSGVO.

d) Contacting us with job applications

If you contact us to send us your application as an employee, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired location, etc.), your message and the application documents submitted will be processed exclusively for the purpose of processing and handling your application request.

The legal basis for data processing is primarily § 26 BDSG. According to this, the processing of data that is required in connection with the decision on the establishment of an employment relationship is permissible.

Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests pursuant to Art. 6 (1) f) DSGVO, namely for the assertion and/or defense of claims.

e) Applicant pool

If you give us your consent to continue to store your application documents after the application process has been completed, we will store them in our applicant pool for the purpose of contacting you about future vacancies that fit your profile. The legal basis for processing within the scope of our applicant pool is your prior consent pursuant to Art. 6 (1) a) DSGVO.

f) Newsletter

In order to provide you with regular information about our company and offers, we offer the dispatch of an e-mail newsletter. With your newsletter registration, we process the data you entered during registration (e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration is logged. This concerns the time of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is your consent in accordance with Art. 6 (1) a) DSGVO. The data processing in connection with the sending of the confirmation email for your registration and the associated data logging is carried out in accordance with Art. 6 para.1 f) DSGVO due to our legitimate interest in proving your proper registration.

If you give us consent, we also evaluate in the newsletters whether you have opened the newsletter as well as the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 (1) a) DSGVO.

For the dispatch of the newsletter, we use service providers to whom we transmit the aforementioned data.

g) Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.

Information about the specific cookies we use, their providers and purposes can be found at our https://www.cookiebot.com/. There you can give your consent to the respective services, revoke it or subsequently adjust your settings.

Our consent banner

In order to document your choices regarding certain data processing operations that use cookies and, in case of your consent, to communicate them to the respective third party providers, we use on our website the service “Cookiebot”, Cybot A/S. Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cybot”).

By making a choice about the cookies used via the cookie consent provided, the following data is automatically logged with Cybot:

• the IP number of the end user in anonymized form (the last three digits are set to ‘0’),
• date and time of consent,
• user agent of the end user’s browser,
• the URL from which the consent was sent,
• an anonymous, random and encrypted key,
• the consent status of the end user, which serves as proof of consent.

The key and consent status are thereby stored in your browser in the cookie “CookieConsent”, so that our website can automatically read and follow your preferences in all subsequent page requests and future end-user sessions for up to 12 months. The key is used for proof of your consents or settings and for an option to check if the consent status stored in your browser is unchanged compared to the original consent submitted to Cybot.

The data processing is carried out in order to comply with our legal obligation to process data in accordance with Art. 6 (1) c) DSGVO.

For more information on data processing at Cybot, please visit: https://www.cookiebot.com/de/privacy-policy/

h) Analysis / marketing

aa) Google services

We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website. It is possible that this may also result in data transfers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.

There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact datenschutz@wdp.de for this purpose.

Google Analytics

We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services related to the use of the website and thus to improve the user experience.

When Google Analytics is used, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.

We use Google Analytics with the extension “anonymizeIp()”. This shortens IP addresses within the member states of the EU or EEA. If a transmission to Google’s servers in the USA takes place, the full IP address is only transmitted in exceptional cases and shortened there. A direct reference to a person is therefore generally excluded. In particular, an assignment to the called computer or terminal of the website visitor is no longer possible.

The following data is processed through the use of Google Analytics:

• 3 bytes of the IP address of the called system of the website visitor (anonymized IP address)
• the website called up
• the website from which the user reached the accessed page of our website (referrer)
• the subpages accessed from the website
• the time spent on the website
• the frequency with which the website is accessed

Google states that it will not associate your IP address with any other data held by Google.

Google remarketing / retargeting

We use so-called tracking cookies from Google on our website. When you visit our site, information is stored in permanent cookies about which products you have viewed on our site and through which ads and third-party sites users reach our website. During a subsequent visit to a partner website, we can have personalized advertising displayed for you based on the items viewed with us.

Google ads

We use Google Ads, an online advertising program from Google, on our website. Here, so-called conversion tracking is operated. If you click on an ad placed by Google, a cookie is set. This cookie loses its validity after 30 days and is not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

The data collected using the conversion cookie is used to generate statistics for Ads customers who have opted in to conversion tracking.

Legal basis and revocation

The legal basis for data processing within the scope of the aforementioned Google services is your prior consent pursuant to Art. 6 (1) a) DSGVO.

You can revoke your consent at any time with effect for the future by adjusting your preferences in our Consent Banner.

bb) Facebook custom audiences (pixel/cookies)

We use a so-called tracking pixel of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA, on our website. We use Facebook Pixel to track the success of our own Facebook advertising campaigns and to optimize the playout of Facebook advertising campaigns to interested target groups.

After clicking on a Facebook ad or when visiting our website, a cookie is stored on your end device using the pixel on our website. The cookie processes data about whether you arrived at our website via a Facebook ad and allows us to analyze the user’s behavior until the purchase is completed. This allows us to track the success rate of our Facebook advertising campaigns. In addition, the pixel processes data about the fact that you have visited our website and allows to customize the ads played on Facebook to your interests.

Via the Facebook pixel integrated on our website, a direct connection to Facebook’s servers is established when you visit our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook in the USA.

There is no adequacy decision of the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. We will provide a copy of the contractual clauses upon request. Please contact datenschutz@wdp.de for this purpose.

The data collected is anonymous for us and does not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can assign the collected information to your account. Even if you do not have a Facebook account or are not logged in when you visit our website, it is possible for Facebook to process and store your IP address and other identification data.

You can revoke your consent for data processing by Facebook Pixel for our web domain at any time with future effect by adjusting your preferences in our Consent Banner.

The legal basis for the data processing is your consent according to Art. 6 para. 1 a) DSGVO.

cc) Facebook conversion API

We use the tracking tool Facebook Conversion API of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. 1601, Willow Road Menlo Park, CA 94025, USA.

This is a data interface through which we transmit data about your behavior on our website to Facebook for evaluation. This allows us to show you ads that match your user behavior on our website.

In connection with the Conversion API, we use the following data:

• Email address
• Phone number
• Gender
• Date of birth
• First and last name
• City, state and country
• Postal code
• User IDs
• IP address
• Client User Agent (the browser you are using and your operating system)
• Click IDs
• Browser ID
• Product IDs
• Advertising ID
• Facebook Login ID

We transmit the data to Facebook. In the process, the data is also transmitted to Facebook in the USA.

There is no adequacy decision of the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. We will provide a copy of the contractual clauses upon request. Please contact datenschutz@wdp.de for this purpose.

The legal basis for data processing is your consent pursuant to Art. 6 (1) a) DSGVO.

You can revoke your consent for data processing by Facebook Pixel for our web domain at any time with future effect by adjusting your preferences in our Consent Banner.

dd) Facebook Custom Audiences (client list)

We use the Custom Audience services of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. 1601, Willow Road Menlo Park, CA 94025, USA. In this process, customer data is transmitted to Facebook in lists and transferred to Facebook servers in the USA. The data is used to analyze user behavior on the Internet and to personalize advertising and, if necessary, linked to an existing user account with Facebook.

The legal basis for data processing is your consent in accordance with Art. 6 (1) a) DSGVO.

You can revoke your consent at any time with effect for the future. Please contact datenschutz@wdp.de.

There is no adequacy decision of the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. We will provide a copy of the contractual clauses upon request. Please contact datenschutz@wdp.de for this purpose.

ee) LinkedIn Insight Tags

We use the LinkedIn Insight Tags service on our website for analysis, retargeting and marketing purposes. This is a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

LinkedIn Insight Tags uses cookies to process the following data from you to use our website:

• Referrer URL
• IP address
• Device information
• Browser information
• Timestamp

It is possible that, as part of the LinkedIn Insight Tags, data will be forwarded to the LinkedIn Corporation based in the USA and processed there. There is no EU Commission adequacy decision for data transfers to the USA. LinkedIn ensures an adequate level of data protection via the EU standard contractual clauses. We will provide a copy of the contractual clauses upon request. Please contact datenschutz@wdp.de for this purpose.

You can revoke your consent for data processing by LinkedIn for our web domain at any time with future effect by adjusting your preferences in our Consent Banner.

The legal basis for the data processing is your consent according to Art. 6 para. 1 a) DSGVO.

ff) Hotjar

In order to optimize the functionality and user-friendliness of our website, we use the web analytics service Hotjar, of Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Silema SLM 1640, Malta, Europe (“Hotjar”). Hotjar works with cookies and other technologies to collect statistical information about the behavior of our users and about their terminal devices. In doing so, Hotjar processes the following data: User behavior (clicks, mouse movements, scroll heights, etc.), IP address of your device, (collected and stored in an anonymized format), name and email address (if provided), device screen size, device type and browser functions, and geographic location (country) to determine the preferred language when viewing the website. This data is transmitted to Hotjar’s servers. Hotjar stores this information in a pseudonymized user profile. The information is neither used by Hotjar nor by us to identify individual users nor is it merged with further data about individual users.

The legal basis for data processing is your prior consent pursuant to Art. 6 (1) a) DSGVO.

You can revoke your consent at any time with effect for the future by adjusting your preferences in our Consent Banner.

gg) Lead Forensics

This website uses Lead Forensics, a B2B sales and marketing support tool. The tool is operated by Lead Forensics, UK Headquarters, Communication House, 26 York Street, London, W1U 6PZ, UK.

Lead Forensics uses a tracking code to identify companies by their business IP addresses. There is a distinction here from cookies. Lead Forensics’ tracking code only provides information that is available in the public domain at all times. The tracking code cannot and does not provide any individual, personal or sensitive data about them. No data is used to personally identify individual visitors. Captured IP addresses, are anonymized immediately after capture. The information generated by the Lead Forensics tracking code, is transmitted to the Lead Forensics tool and processed and stored in a secure environment in the UK.

The Lead Forensics tool provides us with information about which companies have visited our website, with the date and duration of the visit, and about the web pages.

For more information, please visit www.leadforensics.com. If you do not agree with this, you can object to the collection, processing and storage of data at any time with effect for the future by clicking on the following link: https://optout.leadforensics.com/?clientID=135890.

Lead Forensics of Lead Forensics, Building 3000, Lakeside, North Harbour, Portsmouth, PO6 3EN, UK, does not set cookies, but only collects the IP address. This IP address is then transmitted to Lead Forensics, where it is compared with their own databases.

The legal basis for data processing is your prior consent pursuant to Art. 6 (1) a) DSGVO.

You can revoke your consent at any time with effect for the future by adjusting your preferences in our Consent Banner.

i) Use of external content

We use dynamic content (“content”) from third parties to optimize the presentation and the offer of our website. When visiting the website, a request is automatically made to the server of the respective content provider by means of an interface, during which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.

We use external content in connection with the following functionalities:

hh) Google Maps

We use the map service “Google Maps” from Google on our website to provide you with an interactive map. When displaying the map, data including your IP address and your location are transmitted to Google servers and stored there. This processing is carried out on the basis of our overriding legitimate interest in optimal marketing of our offer in accordance with Art. 6 (1) f) DSGVO.

The responsible party for data processing for Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). It cannot be ruled out that a data transfer to Google- LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA takes place.

There is no adequacy decision of the EU Commission for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. Please contact datenschutz@wdp.de for this purpose.

ii) MyFonts

MyFonts requires wdp GmbH to use the MyFonts Counter to correctly account for the calculation of annual license fees for the use of protected fonts on wdp.de.

To prevent the execution of Java Script code from MyFonts altogether, you can install a Java Script blocker (e.g. www.noscript.net). Further information on data protection at MyFonts can be found at the following link: https://www.myfonts.com/info/terms-and-conditions.

The legal basis for the data processing is our overriding legitimate interest in the optimal marketing of our online offer according to Art. 6 1 f) DSGVO.