General notes

General information on the processing of personal data

1. Who is responsible for the data collection on this website?

“Controller” of the data processing on this website is: Lebenshilfe Aachen
Workshops & Service GmbH Neuenhofstrasse 170
52078 Aachen
Phone: +49 241-9 28 11-0
Fax: +49 241-9 28 11-156
E-mail: info@werkstatt-ac.de

The “data controller” is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

If you have any questions or concerns regarding data protection, please contact our data protection officer using the contact below:

Postal:

Lebenshilfe Aachen Werkstätten & Service GmbH Data Protection Officer
Neuenhofstrasse 170
52078 Aachen

By e-mail: dsb@werkstatt-ac.de

2. How do we collect your data?

In general, we collect and use personal data from our users only to the extent necessary to provide a functional website and our content and services. First, your data is collected when you provide it to us. This may be data that you provide to us when you contact us.

Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view).

3. What do we use your data for?

Some of the data is collected to ensure that the website is provided properly. Other data may be used to provide certain features or services on our website or to analyse user behaviour of website visitors.

4. Storage and deletion

The deletion of the data processed by us is carried out in accordance with the statutory provisions. As soon as they are no longer required for the purposes of data collection or as soon as any consent given is revoked, unless we are obliged or entitled to retain the data beyond this period due to legal obligations (e.g. retention periods under commercial or tax law) or in order to pursue legal claims or other legitimate interests.

In this case, processing is limited to these purposes (as opposed to deletion) in the form that the data is blocked and not processed for other purposes. Further information on the deletion of personal data can be found in the individual explanations in this data protection notice.

5. Analysis tools and third-party tools

When you visit our website, your surfing behaviour can be statistically evaluated. This is mainly done with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by adjusting your browser settings. When you enter our website, we will ask you for your prior consent to analysis and tracking technologies. You can find detailed information on this in the following data protection information.

6. Security of your data

We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. In particular, your data is transmitted in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption system. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock in your browser line.

7. What rights do you have in relation to your data

Under the European Data Protection Regulation (“GDPR”), you have extensive rights with regard to the processing of your personal data. On the one hand, you have a comprehensive right to information and, if necessary, you can request the correction and/or deletion and/or blocking of your personal data. Secondly, you can request a restriction of processing and have a right to object and a right to data portability. If you wish to exercise any of your rights or would like to receive more detailed information, please contact us using our contact details.

You also have the right to lodge a complaint with a supervisory authority.
The use of our website is generally possible without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the Internet (e.g. communication by e- mail) can have security gaps. Complete protection of data against access by third parties is not possible.

DATA PROTECTION INFORMATION

Introduction

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

Certain information we collect is necessary to fulfil our contractual or legal obligations, others are necessary for us to operate the websites or to fulfil our legitimate interests as a company. In some cases, the information we collect may only be used with your consent.

Please read the following privacy notice carefully to understand our approach to your data and how we treat it.

The information we receive and how we use it depends on what you do when you visit our websites, how your browser is configured and what information you provide to us.

Person responsible and data protection officer

The person responsible for this website is: Lebenshilfe Aachen
Workshops & Service GmbH
Neuenhofstrasse 170
52078 Aachen

Phone: +49 241-9 28 11-0
Fax: +49 241-9 28 11-156
E-mail: info@werkstatt-ac.de

You can contact our data protection officer as follows: Postal:
Lebenshilfe Aachen Workshops & Service GmbH Data Protection Officer Neuenhofstrasse 170
52078 Aachen By e-mail:
dsb@werkstatt-ac.de

Web Host:
Küppershofweg 15, 52072 Aachen, e-mail: info@i-nex.de

Shared responsibility

If we carry out processing operations under shared responsibility (Art. 26 of the GDPR), we will inform you about this at the relevant points in these notes.

Data processing outside the European Union/European Economic Area

If personal data is processed outside the European Union, you can see this in the relevant parts of this notice.

Links to other websites

Our website contains links to other websites. We are not responsible for the data protection and also the content of these other internet offers and in particular have no influence on them. We select the pages to which we link to the best of our knowledge and belief, check them as far as is reasonable and remove links from our website if we are notified of dubious or even illegal content or become aware of it in any other way. If you notice such content, please inform us so that we can react accordingly. We recommend that internet users who leave our website inform themselves about the respective data protection information of the other internet offers they visit.

Data processed for the provision of the website and the creation of log files

Description and scope of data processing

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

The IP address is stored anonymously. For this purpose, the last three digits are removed. This data is not merged with other data sources.

1. b) Legal basis for data processing

The legal basis for the temporary storage of the data is Art. 6 para. 1 lit f DSGVO.

1. c) Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit f DSGVO.

1. d) Duration of storage, possibility of objection and elimination

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP address is alienated so that it is no longer possible to use the calling client.

1. e) Are there other recipients of the personal data besides the data controller?

The website is hosted by i-nex GmbH, Küppershofweg 15, 52072 Aachen, e-mail: info@i- nex.de. The hoster receives the above-mentioned data as a processor of the data controller.

Cookies

Our internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising. Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions desired by you (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the framework of this data protection declaration and, if necessary, request your consent.

You can adjust your cookie settings here.

Cookie consent with Borlabs Cookie

Our website uses the cookie consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, which stores the consents you have given or the revocation of these consents. This data is not shared with the Borlabs cookie provider.

The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabscookie/.

The use of Borlabs cookie consent technology takes place in order to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c DSGVO.

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e-mail, post or via the online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated in strict confidence.

1. a) Description and scope of data collection

If you submit an application to us, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent that this is necessary to decide on the establishment of an employment relationship. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG-neu and Art. 6 (1) lit. b DSGVO for the purpose of implementing the employment relationship.

1. b) Purpose of the data processing

The purpose of the data processing is the initiation or establishment of an employment relationship.

1. c) Legal basis

The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time.

1. d) Are there other recipients of the data besides the data controller?

Your personal data will only be passed on within our company to persons who are involved in processing your application.

1. e) Retention period of the data

If we are unable to make you a job offer. If you reject a job offer or withdraw your application, we reserve the right to retain the data you have provided on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. This storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for continued storage no longer applies.

Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a DSGVO) or if legal storage obligations prevent deletion.

1. f) Inclusion in the applicant pool

If we do not make you a job offer, it may be possible to include you in our applicant pool. In the event of inclusion, all documents and details from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.

Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a DSGVO). The provision of consent is voluntary and is not related to the current application process. The person concerned can revoke his/her consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.

Services used to improve functionality, statistics and web analysis

Google

1. a) General information about the use of Google services

This information applies to all web services that we use on our website and that are offered by Google:

If you are habitually resident in the European Economic Area or Switzerland, you may use the services of Google Ireland Ltd (“Google”), a company incorporated and organised under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

You can find a current excerpt of the terms of use as well as explanations about data protection at Google at

https://policies.google.com/privacy

https://policies.google.com/terms

Current information on third country transfers

Since Google operates servers all over the world, it cannot be ruled out that personal data will still be transmitted to Google LLC, which is based in the USA.

Until now, Google has based the transfer of data on certification under the EU. S. Privacy Shield agreement. In its ruling of 16 July 2020, the European Court of Justice (“ECJ”) declared the transfer of data on the basis of this agreement to be inadmissible. Accordingly, the USA is to be classified as a state with an insufficient level of data protection according to EU standards. In particular, the ECJ considers the lack of effective legal protection for data subjects to be insufficient. This means that there is a particular risk that your data as a website visitor affected by the use of cookies can be processed by U.S. authorities for control and monitoring purposes without you having any legal remedy options available to you.

Work is currently underway on alternative bases pursuant to Art. 46 DS-GVO for the transfer of personal data to the USA, including the switch to the so-called standard contractual clauses (“SCC”) and any supplementary agreements that may be required.

1. b) DoubleClick

This website also continues to use the so-called DoubleClick cookie from Google, which enables your browser to be recognised when you visit other websites. The information automatically generated by the cookie about your visit to this website is transmitted to a Google server and stored there. Please also note our general information on the use of Google services. The IP address is shortened by activating IP anonymisation on this website before transmission within the member states of the European Union or to other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.

Google will use this information on our behalf for the purpose of compiling reports on website activity and providing other services relating to website usage. This serves our legitimate interest in the optimal marketing of our website, which is why we also ask for your consent (Art. 6 (1) p. 1 lit. a DSGVO) as the legal basis for the use of the DoubleClick cookie as part of our cookie request mentioned above.
Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The data collected in this context will be deleted after the end of the purpose and use of Google DoubleClick by us.

You can prevent the collection of the data generated by the cookies and related to your use of the websites to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link under the item DoubleClick deactivation extension. Alternatively, you can also deactivate the DoubleClick cookies with this opt-out.

1. c) Google Maps

This website uses the map service Google Maps via an API. Please also see our general information on the use of Google services.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the U.S.A. and stored there. The provider of this site has no influence on this data transfer.

Google Maps is used to make it easier to find the places we indicate on the website.

If you use the Google Maps service by clicking on it, Google will collect and store your data. Before using the map service, please inform yourself about the type and scope of the data collection there and the further processing and use of the data by Google as the provider of the map service, as well as about your rights and setting options for protecting your privacy, which you can find out about in Google’s privacy policy https://policies.google.com/privacy.

The map service is started by active action of the website visitor and is considered by us as consent (Art. 6 para. 1 sentence 1 lit. a DS-GVO to the transmission of data to Google.

The Google Maps Terms of Use can be found at: Google Maps Terms of Use.

Social media

Current information on third country transfers

Until now, many social network providers, such as Facebook, based the transfer of data on certification under the EU-U.S. Privacy Shield Agreement. In its ruling of 16 July 2020, the European Court of Justice (“ECJ”) declared the transfer of data on the basis of this agreement to be inadmissible. Accordingly, the USA is to be classified as a state with an insufficient level of data protection according to EU standards. In particular, the ECJ considers the lack of effective legal protection for data subjects to be insufficient. This means that there is a particular risk that your data as a website visitor affected by the use of cookies can be processed by U.S. authorities for control and monitoring purposes without you having any legal remedy options available to you.

Work is currently underway on alternative bases pursuant to Art. 46 DS-GVO for the transfer of personal data to the USA, including the switch to the so-called standard contractual clauses (“SCC”) and any supplementary agreements that may be required.

1. a) Use of YouTube videos

We integrate YouTube videos on our website. This service is provided by Google (“provider”). Please also see our general information on the use of Google services. For YouTube videos embedded on our website, the extended data protection setting is activated. This means that no information about website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves to protect our predominantly legitimate interests in the optimal marketing of our offer in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO.

When you play a video embedded on our website, YouTube collects and stores your data. Therefore, before playing the video, please inform yourself about the purpose and scope of the data collection there and the further processing and use of the data by Google as the provider of the YouTube service, as well as about your rights and setting options for protecting your privacy, which you can find out about in Google’s privacy policy http://www.google.com/intl/de/+/policy/+1button.html.

The start of the playback of an embedded YouTube video takes place through the active action of the website visitor and is regarded by us as consent (Art. 6 para. 1 lit. a DSGVO).

evaluated for the transmission of data to YouTube (Google). When a YouTube video is played, the IP address and other login data of the website visitor are transmitted to YouTube and thus, in particular, information about which of our websites the visitor has visited.
However, this information cannot be linked to the respective website visitor unless the visitor has logged in to YouTube or another Google service (e.g. Google+) before viewing the page or is permanently logged in.

When playback of an embedded video is started by clicking on it, YouTube only stores cookies on the website visitor’s device via enhanced privacy mode, which do not contain any personally identifiable information unless the website visitor is currently logged in to a Google service. These cookies can be prevented through appropriate browser settings and extensions.

Address and link to the privacy policy of the third-party provider:

Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland –

Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated

1. b) Use of Facebook, Instagram and Xing

Our websites contain links (flags) to our online presences in various social networks, such as Facebook, Instagram or Xing. With these links, you leave our website and are directly connected to our respective online presence on e.g. Facebook or Xing. We would like to point out that on these platforms, the respective terms of use and data protection guidelines of the respective operator of the social network apply, over which we have no influence. We may collect so-called insights data on our online presences. The purpose of collecting this data is website analysis to improve the web content and offers on the fan page. Please note that we have no influence on the settings of “Insights”. The settings are controlled by the social media provider. We only receive aggregated “Insights” from the social media provider. Detailed information on “Insights” can be found below. The collection of “Insights” data is based on Art. 6 para. 1 lit f DSGVO. We see our legitimate interest in offering a communication channel for self-presentation, analysing the success of the measures and aligning our own offer with the interests of the visitors.

Please note that from this point onwards, the terms of use and data protection information of the respective third-party provider as operator of the social network apply. Below you will find information on the terms of use and data protection conditions of the individual third-party providers.

We would also like to point out that in the event of requests for information or the assertion of rights of the data subject, direct contact with the respective third party provider may be more effective, as usually only the third party provider has access to the users’ data and can take the appropriate measures and provide information. However, in our capacity of “joint controller” with the third party provider, you also have the right to contact us. We will then forward your request or allegation to the social media provider. We will be happy to assist you at any time.

Where provided by the third-party providers, we have concluded corresponding data protection agreements in accordance with Art. 26 DS-GVO (joint responsibility) or Art. 28 (commissioned processing) and, in the case of a transfer to third countries outside the EU/EEA, we pay attention to suitable guarantees in accordance with the requirements of Art. 46 ff DSGVO.

Until an equivalent solution is implemented (see current notice above), we refer to the transfer by way of exception on the basis of consent pursuant to Art. 49 (1) lit. a DSGVO. This is done by means of a corresponding note on third-country transmission and acceptance of forwarding to the respective social media providers, as the use of this content is inextricably linked to the possibility of transmission to the USA.

If you wish to prevent any transmission of your data to the USA, you should refrain from forwarding your data to the social media providers and, if you are a registered user on the relevant social platform, from logging into your account at the same time.

We work with the following third party social network providers:

– Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) –

Privacy policy:www.facebook.com/about/privacy/ Privacy settings:www.facebook.com/settings
Terms of use:www.facebook.com/legal/terms/update

Cookie policy: https://www.facebook.com/policies/cookies

Information on shared responsibility: https://www.facebook.com/legal/terms/page_controller_addendum

Information about “Insights” data: https://www.facebook.com/legal/terms/information_about_page_insights_data

Opt-out:www.facebook.com/settings and www.youronlinechoices.com,

1. Xing (New Work SE Dammtorstraße 29-32 20354 Hamburg Germany) – Privacy policy / opt-out: privacy.xing.com/en/privacy-policy.

Privacy settings: faq.xing.com/en/node/750

Cookie Policy: privacy.xing.com/en/privacy-policy/print-version Terms of use: https://www.xing.com/terms

1. Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy policy/ Opt-out: http://instagram.com/about/legal/privacy/

Privacy settings: https://www.instagram.com/accounts/privacy_and_security/

Information on shared responsibility: https://www.facebook.com/legal/terms/page_controller_addendum

Information about “Insights” data: https://www.facebook.com/legal/terms/information_about_page_insights_data

Cookie policy: https://help.instagram.com/1896641480634370?ref=ig Terms of use: https://help.instagram.com/581066165581870?ref=dp
Rights of the data subjects

1. a) Right to information

In accordance with Art. 15 DS-GVO, you can request information about the personal data we process.

1. b) Right of rectification

If the information concerning you is not (or is no longer) correct, you may request correction in accordance with Art. 16 of the GDPR. If your details are incomplete, you can request that they be completed.

1. c) Right to erasure

According to Art. 17 DS-GVO, you have the right to have your personal data deleted.

1. d) Right to restrict processing

Pursuant to Art. 18 DS-GVO, you have the right, if the conditions are met, to request restriction of the processing of your personal data.

e) Right of appeal

If you believe that the processing of your personal data violates data protection law, you have the right to complain to a

data protection supervisory authority of your choice in accordance with Article 77(1) of the GDPR. This includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information of North Rhine- Westphalia, Postfach 20 04 44, 40102 Düsseldorf, 0211/38424-0, poststelle@ldi.nrw.de.

1. f) Right to data portability

In the event that the requirements of Art. 20 (1) DS-GVO are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract released to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) a DS-GVO or on a contract pursuant to Art. 6 (1) b DS-GVO, but are justified pursuant to Art. 6 (1) f DS-GVO and therefore do not meet the requirements for data portability.

Right to object under Article 21(1) of the GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data by us pursuant to Article 6(1)(f) of the GDPR, i.e. processing that we base on our legitimate interests. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is carried out for the purpose of asserting, exercising or defending legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.

Amendment and updating of the data protection notice

We reserve the right to update our privacy notice from time to time if changes in the data processing we carry out make this necessary or if the legal framework or its interpretation and application practices that form the basis of our data processing change.

We therefore ask you to inform yourself about the content of our data protection information at regular intervals.

DATA PROTECTION OFFICER of the
Lebenshilfe Aachen Werkstätten & Service GmbH

If you have any questions or suggestions regarding the processing of your personal data by us, we welcome them. In this case, you can reach our Data Protection Officer (DPO) as follows:

Postal:

Lebenshilfe Aachen Werkstätten & Service GmbH
Data Protection Officer Neuenhofstrasse 170
52078 Aachen

By e-mail: dsb@werkstatt-ac.de

Status: February 2021