Privacy Policy

Analytik Jena AG takes the protection of personal data very seriously and therefore adheres to data protection regulations. Personal data is collected on this website only to the extent necessary. Under no circumstances will the collected data be passed on to third parties without your knowledge or a valid lawful reason. The following declaration provides you with an overview of what data Analytik Jena AG collects during your visit to its website and for what purpose. It also explains how the data is used and what associated protective measures are taken on a technical and organizational level.

I.    Controller/Service Provider

The controller as defined by the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDGG-new), and the legal data protection regulations of the state of Thuringia (ThürDSG), as well as the service provider as defined by the German Telemedia Act (TMG) are:

Analytik Jena Aktiengesellschaft
Konrad-Zuse-Strasse 1
07745 Jena, Germany
Phone: +49 3641 77 70
Email: datenschutz.team@analytik-jena.de
(cf. our imprint: https://www.analytik-jena.de/en/imprint.html)

II.    Data Protection Officer

The data protection officer of the controller is:

AGOR AG
Justyna Rulewicz
Hanauer Landstraße 151-153
60314 Frankfurt am Main, Germany
Email: datenschutz@analytik-jena.de

Please direct any questions or comments regarding this privacy policy or general questions about data protection to our data protection officer.

III.    General Information About Data Processing

1.    Scope of the Processing of Personal Data

We collect and use the personal data of our users in principle only as required to host a functional website featuring our content and services. We collect and use the personal data of our users only after they have granted their consent. An exception applies in such cases in which it is not possible to obtain prior consent, and legal provisions require the processing of data.

2.    Legal Basis for Processing

If we obtain your consent for subjecting your data to processing operations, Art. 6, Para. 1 sentence 1 lit. a GDPR serves as the legal basis.
For the processing of personal data as required to fulfill a contract to which you are a contractual party, Art. 6 Para. 1 S. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are required to conduct precontractual measures.
If the processing of personal data is required to fulfill a legal obligation to which Analytik Jena AG is subject, Art. 6 Para. 1 S. 1 lit. c GDPR serves as the legal basis.
If processing is required to preserve a legitimate interest of our Company or a third party and the interests and fundamental rights and freedoms of the data subject do not outweigh the former interest, then Art. 6 Para. 1 S. 1 lit. f GDPR serves as the legal basis for the processing.

3.    Data Deletion/Storage Period

Your personal data is deleted or restricted as soon as the purpose of storage no longer holds. In addition, data may be stored if it has been provided by the European or national legislator in EU legal regulations, laws, or other provisions applicable to Analytik Jena AG. Data may also be restricted or deleted if a storage deadline stipulated by the specified standards has expired unless further storage of the data is required for the conclusion or fulfillment of a contract.

IV.    Data Processing on this Website

1.    Description and Scope of Data Processing

Whenever you access our Analytik Jena website, temporary information transmitted by your browser is automatically stored on the (web) servers. The data recorded in the designated log file includes among others: the pseudonymized IP address, the browser used, the time and date of the page visitor, and the system used by the page visitor.
The data is also stored in the log files of our system. This data is not stored together with other personal user data.

2.    Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6 Para. 1 S. 1 lit. f GDPR.

3.    Purpose of Data Processing

The temporary storage of the IP address by the system is necessary in order to present the website to the user’s computer, thereby enabling our website to be visible to you as a user. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files is necessary to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our information technology systems. No data analysis for marketing purposes occurs in this context.
An additional purpose is our legitimate interest in data processing according to Art. 6 Para. 1 S. 1 lit. f GDPR.

4.    Duration of Data Processing

The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection.  The retention period is seven days. Backups are preserved in encrypted form for 14 days.

5.    Opt-out and Removal Option

The collection of data for hosting the website and the storage of data in log files are absolutely necessary for operating the website. To this extent there is no opt-out option.

V.    Use of Cookies

1.    Description and Scope of Data Processing

We also use cookies for data collection and storage. Cookies are small data packages or text files that are stored in or by the internet browser on the user’s computer system. If a user views a website, a cookie can be stored in the user’s operating system. This cookie contains a characteristic string of characters that enable a unique identification of the browser during another visit to the website.
Two types of cookies are used in this process:
By using technically necessary cookies, we are able to make our website more user friendly. Several elements of our website require that the viewing browser can also be identified after a page change.
In addition, we use analysis cookies that enable an analysis of your surfing behavior and the tracking of your usage behavior for the aforementioned purposes to the corresponding extent.
We collect the data only in anonymized or pseudonymized form. Therefore, it is not possible to attribute the data to the user viewing the website. This data is not stored together with other personal user data.

2. Cookie Banner

When you view our website, you are informed of the use of cookies for analytic purposes via an info banner (cookie banner). The banner also makes reference to this privacy policy.

3. Legal Basis for Data Processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 S. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for analytic purposes, subject to the user’s consent, is Art. 6 Para. 1 S. 1 lit. a GDPR.

4. Purpose of Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for the users. Several features of our website cannot be offered without the use of cookies, which allow the browser to be re-identified after a page change.
The user data collected by technically necessary cookies is not used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its content. By using analysis cookies, we learn how the website is used, enabling us to continuously optimize our services.
We use cookies for the following specific purposes:

Cookie name

Provider

Expiration

Purpose

fe_typo_user

TYPO3 Plugin

Unlimited

Used for logging into the Analytik Jena extranet.

_ga

Google

2 years

Used for differentiating between users.

_gid

Google

24 hours

Used for differentiating between users.

_gat

Mellowmessage GmbH

1 minute

Used to restrain the request rate.

ajNewsletter

Mellowmessage GmbH

Depending on subscription: unlimited resp. 4 weeks

Used for newsletter subscription.

optInCookie

Mellowmessage GmbH

365 days

Documents the user’s acceptance in the cookie banner.

An additional purpose is our legitimate interest in the processing of personal data according to Art. 6 Para. 1 S. 1 lit. f GDPR.

4.    Duration of Storage, Opt-out and Removal Option

Cookies are stored on the user’s computer and transmitted from it to our site. Temporary cookies are automatically deleted when you close your browser (session cookies). By contrast, persistent cookies have a longer lifespan. This type of cookie makes it possible to recognize you again after you leave the website.

As a user, you have complete control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also be automated.
If cookies are disabled for our website, it may not be possible to fully use all of the features of the website

VI.    Google Analytics Web Analytics Service

Our website uses Google Analytics, a web analytics service of Google LLC. (“Google”) (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).

1.    Description and Scope of Data Processing

Google Analytics uses files called cookies, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website (including your IP address) are usually transmitted to a Google server in the USA and stored there.
On our website, we use the code extension “anonymizeIp,” which activates IP anonymization on this website. When this extension is used, however, Google will shorten your IP address beforehand within the member states of the European Union or in other treaty states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google will not combine the IP address transmitted by your browser as a result of Google Analytics with other data.
Google will transmit this information to third parties, if necessary, as long as this is legally prescribed, or third parties process this data on behalf of Google.

2.    Log Files

Whenever you access our Analytik Jena website, temporary information transmitted by your browser will automatically be stored in Google Analytics. This entails the following information:

  • browser type/version,
  • the operating system used,
  • terminal device used for the access (cell phone, table, desktop),
  • location of the access,
  • name and URL of the viewed page(s) or file(s),
  • referrer URL (the previously visited page),
  • host name of the accessing computer (IP address),
  • date and time of the server request,
  • page views during the page visit,
  • duration of the page visit,
  • conversions (e.g., making contact, partner searches, product inquiries, etc.), and
  • searches on the website.

If users are signed into a Google account, we use demographic features derived from their settings, if necessary. Users can change their demographic data in the advertising settings of their Google account.

3.    Legal Basis for Data Processing

The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f GDPR.

4.    Purpose of Data Processing

We use Google Analytics in order to routinely analyze and improve the use of our website. Google will use the information exclusively on our behalf in order to evaluate your use of the website, in order to compile reports about website activities, and to render other services related to website and internet use for the website operator. The compiled statistics enable us to improve our services and design them to be more interesting for you as a user.
An additional purpose is our legitimate interest in the processing of personal data according to Art. 6 Para. 1 S. 1 lit. f GDPR.

5.    Duration of Data Processing

The data we send and cookie-related data are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once monthly.

6.    Opt-out and Removal Option

You can prevent the storage of cookies through a corresponding setting of your browser software. You can prevent recording by Google Analytics by clicking on the following link deactivate Google Analytics. An opt-out cookie is set that prevents the future recording of your data when visiting this website. In order to prevent recording across various devices, you must opt out of all the systems being used.
In addition, you can prevent the collection of the data generated by the cookies and related to the use of the website (including your IP address) for Google and the processing of this data by Google by downloading and installing the browser plug-in (add-on) available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. By using the browser add-on to disable Google Analytics-JavaScript (ga.js, analytics.js, dc.js), you can prevent Google Analytics from using your data.
We would like to point out that you will not be able to fully use all of the features of this website if your settings block cookies.

7.    Additional Information About Google

You can find more detailed information about contact options, terms of service, and data protection at:
https://www.google.de/contact/impressum.html – Contact
https://www.google.com/analytics/terms/us.html – Terms of Service
http://www.google.com/intl/en/analytics/learn/privacy.html – Data Privacy and Security
https://www.google.com/intl/en/policies/privacy/ – Privacy Policy

In exceptional cases in which personal data is transmitted to the USA, Google complies with the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
Contact: Google Ireland, Gordon House, Barrow Street, Dublin 4, Ireland.

VII.    Making Electronic Contact

We offer you the opportunity to inform yourself on various issues concerning Analytik Jena AG and to contact us electronically via the website, if necessary. You have the option of initiating electronic contact with us through the provided contact forms as well as the provided email addresses.

1.    Description and Scope of Data Processing

When electronic contact is made with us via the contact form, the data entered into the input window is transmitted to us and stored. Mandatory information transmitted to us is personal data, such as your first and last name and your email address. At the time the message is sent, the following data is also stored: IP address, date, and time of day. During the sending procedure, your consent is obtained for data processing and reference is made to this privacy policy.
Alternatively, making contact electronically is possible via the email address provided. In this case, only the personal data transmitted in your email is stored, if necessary.
The data is used exclusively for processing the conversation.
In this context, no data is passed along to third parties. If the inquiry relates to the activity of a subsidiary, an equity investment company, or a management company of Analytik Jena AG and the information is needed for the efficient processing of the inquiry, your data can be shared with the relevant company.
However, in view of legal requirements, we are obligated to pass your personal data along to third parties in certain cases. This is the case, for example, if there is suspicion of a criminal offense. We are then obligated to pass your personal data along to the responsible law enforcement authorities. Therefore, by order of the responsible authorities, we may in individual cases provide information about this data if necessary for criminal prosecution, averting danger, performing legal tasks of the German Office for the Protection of the Constitution, the military counter-intelligence service, or for enforcing intellectual property rights.

2.    Legal Basis for Data Processing

The legal basis for the processing of data, subject to the user’s consent, is Art. 6 Para. 1 S. 1 lit. a GDPR.
The legal basis for the processing of data that is transmitted as a result of sending an email is Art. 6 Para. 1 S. 1 lit. f GDPR. If the email contact is intended to conclude a contract, an additional legal basis for processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

3.    Purpose of Data Processing

The processing of personal data from the input window of the contact form solely helps us to process the contact. Making contact via email also constitutes the necessary legitimate interest to process the data.
The other personal data processed during the sending procedure serves to prevent the misuse of the contact form and to safeguard the security of our information technology systems.

4.    Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input window of the contact form and the data that was sent by email, this is the case if the respective conversation with the user has ended. The conversation has ended when circumstances indicate that the relevant matter has been conclusively clarified.
The additional personal data collected during the sending procedure is deleted after no later than seven days.

5.    Withdrawal and Opt out Option

As a user, you have the option to withdraw your consent to the processing of personal data at any time. You can address your withdrawal to us or our data protection officer informally in writing or verbally. You can find the contact information for this in sections I and II of this privacy policy.
You can opt out of the storage of your personal data at any time by sending us an email. In this case, all personal data that was stored as a result of making contact is deleted. You can address your opt-out request to us or our data protection officer informally in writing or verbally. You can find the contact information for this in sections I and II of this privacy policy.
Upon withdrawal or opting out, the conversation cannot be continued.

VIII.    Inserting Hyperlinks

If you encounter hyperlinks on our website that transfer you directly to the website of other providers (e.g., recognizable by the change in URL), we do not assume any responsibility for the confidential handling of your data. After all, we have no influence over the compliance of these companies with data protection regulations. Please inform yourself directly regarding how these companies handle personal data on their website.

IX.    Sending of Informational Material

1.    Description and Scope of Data Processing

Our website offers the option of ordering informational material about products and services by Analytik Jena AG (e.g., information package about products, brochures, manuals, flyers, application manuals, publications) organized by topic and/or by special request without charge, which you will then receive by email. During the process of registration to receive the informational material, the data from the input window is transmitted to us and stored.
No information is passed on to third parties in the context of data processing for the sending of the informational material. The data is used exclusively for sending the informational material.

2.    Legal Basis for Data Processing

The legal basis for the processing of data following the user’s registration to obtain the informational material is Art. 6 Para. 1 S. 1 lit. b GDPR.

3.    Purpose of Data Processing

Collecting user data assists in delivering the requested informational material. The collection of other personal data as part of the registration procedure serves to prevent misuse of the services or the address used (email or postal address) and to ensure the safety of our IT systems.

4.    Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. Accordingly, the user’s address (email or postal address) is stored for as long as it takes to process the delivery of the informational material. Other personal data collected during the registration procedure is usually deleted after seven days.

5.    Opt-out Option

You can opt out of the storage of your personal data at any time. In this case, all personal data that was stored as a result of sending the information material is deleted. You can address your opt-out request to us or our data protection officer informally in writing or verbally. You can find the contact information for this in sections I and II of this privacy policy.

Upon opting out, the conversation cannot be continued.

X.    Newsletter

1.    Description of the Nature and Scope of Data Processing

Our website offers the option of subscribing to a newsletter free of charge. During the process of registration for the newsletter, the data from the input window is transmitted to us and stored. This includes your given email address and company (mandatory information). It also includes your voluntary information on gender, name, and place of residence. Mandatory and voluntary information is treated in the same manner. The distinction between mandatory and voluntary information is necessary since it is not possible to obtain the newsletter without indicating an email address, and the newsletter is exclusively directed at business customers.
During the registration procedure, your consent is obtained for data processing and reference is made to this privacy policy.
During registration for the newsletter, the double opt-in procedure is used. This means that after requesting our newsletter (first opt-in), you receive a confirmation email at the email address you indicate and you confirm by clicking on a link inside this email that you would like to have the newsletter sent to you (second opt-in). If you do not confirm this email, you will not receive any further information from us.
The data is used exclusively for sending the newsletter.
No information is passed on to third parties in the context of data processing for the sending of the newsletter.

2.    Legal Basis for Data Processing

The legal basis for the processing of your data following registration for the newsletter, subject to your consent, is Art. 6 Para. 1 S. 1 lit. a GDPR.

3.    Purpose of Data Processing

Recording the user’s email address allows us to deliver the newsletter. The newsletter is sent as a result of the user’s registration on the website.
The collection of other personal data as part of the registration procedure serves to prevent misuse of the services or the email address used.

4.    Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. Accordingly, your email address is stored for as long as the newsletter subscription is active.
Other personal data collected during the registration procedure is usually deleted after seven days.
If you confirm your email during the double-opt-in procedure, we store your input data until you withdraw your consent.

5.    Analytic Services of Evalanche

We would like to point out that we can analyze your user behavior when sending the newsletter.
We use Evalanche for sending our newsletter. Evalanche is an analytic service of SC-Networks GmbH, Enzianstr. 2, 82319 Starnberg, Germany. Evalanche will not pass your personal data along to third parties.
Evalanche uses files called cookies, text files that are stored on your computer and enable analysis of the use of the newsletter. The information generated by the cookie regarding your use of the newsletter (including your IP address) is read and sent to a server in Germany.
The newsletter includes tracking pixels (so-called web beacons). These are miniature graphics that enable log file recording and log file analysis for statistical evaluations. Technical information (such as the browser and your system, the terminal device used and the mail client), your IP address and the time of retrieval are collected. It is also collected whether the e-mails were delivered successfully, whether and when the newsletters were opened and which links were clicked. In addition, the reading time is recorded on a target group basis.
The tracking pixels, as well as the links contained in the newsletters, are linked to the ID assigned to you by the above cookie, which is assigned to your e-mail address and allows you to determine your reading behavior from the retrieval locations that can be determined by means of the IP address (personal tracking).
The information is used to technically improve the service based on the technical data or the target groups and their reading behavior based on the call locations or access times. The information serves us to recognize your reading habits and to adapt our contents to them or to send different contents according to your interests and technical requirements as a newsletter user.
Personalized tracking is not carried out without your consent. During the registration procedure for the newsletter, you can provide your special consent to this.

6.    Withdrawal and Removal Option

You can cancel your subscription to the newsletter at any time and withdraw your consent to receive the newsletter. For this purpose, the newsletter can be canceled either by the provided link in the newsletter or a message to datenschutz.team@analytik-jena.de.

You can withdraw your consent to personalized tracking at any time by clicking on the special link to process your newsletter profile that is available in every newsletter email. You can then actively uncheck personalized tracking (opt-out) on the indicated profile processing page or notify us at datenschutz.team@analytik-jena.de to do so.

Withdrawal does not affect the legality of processing until withdrawal as previously consented. Upon withdrawal of the consent declaration, the data is deleted unless the need exists for further storage of the data, e.g., through legal requirements.

XI. Integration of OpenStreetMap

This site uses the open source mapping tool “OpenStreetMap.” The provider is the OpenStreetMap Foundation. In order to use the functions of OpenStreetMap, it is necessary to store your IP address. This information is transferred to a server of OpenStreetMap and stored there. The provider of this site has no influence on this data transfer.

XII. Integration of GoToWebinar

You can participate in webinars over the internet through the provider LogMeIn, Inc. and its software-supported solution. In order to do so, you must first register using your name and email address.
LogMeIn, Inc. is responsible for the provision of the service and the associated data processing. For the contract-based implementation of the webinar, we transfer your login data to LogMeIn Inc.
An encrypted connection is established between you and Analytik Jena. By logging in, you agree that you will not create any unauthorized recordings or screen captures of the respective meeting.
Statistical data is transmitted to Analytik Jena during the webinar. Using this data, it is possible to collect information on the duration of participation and general interest in the webinar for further customer support or development of the user experience.
The legal basis for this data processing is Art. 6 Para. 1 S. 1 lit. a GDPR, since your consent for the use of the webinar software is given in each case.
You can end the meeting at any time by closing the browser window.

XIII. Integration of YouTube Videos

We have integrated YouTube videos into our online offering which are stored on www.youtube.com and can be played directly from our website. All of these videos are embedded in “privacy-enhanced mode,” meaning no data about you as a user is transmitted to YouTube if you do not play any videos. The data listed in Para. 2 is transferred only if you play the videos. We have no influence over this data transfer.
When the website is visited, YouTube receives the information that you have viewed the corresponding sub-page of our website. This takes place regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data is directly attributed to your account. If you do not want your data to be attributed to your YouTube profile, you must log out before clicking the play button. YouTube stores your data as a usage profile, which it uses for purposes of advertising, market research, and/or to design its website to be more accessible. Such an analysis takes place in particular (even for users who are not logged in) to display advertising appropriate to users’ accessibility needs and to inform other users of the social network about users’ activities on our website. You have a right to object to the creation of this user profile; you must contact YouTube to exercise this right.
You can find more information about the purpose and scope of the data collection and its processing by YouTube in its privacy policy. There you can also find more information about your rights and privacy settings options: https://www.google.de/intl/de/policies/privacy . Google processes your personal data at locations that include the United States and has declared itself subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

XIV. Social Media Presence

We maintain fan pages on various social media networks and platforms with the objective of communicating with the customers, interested potential customers, and users active there and to inform them of our services.

We would like to point out that your personal data may be processed outside the European Union in this context, meaning that risks may arise for you in this area (such as when exercising your rights under European/German law). Please note that several US providers are certified under the Privacy Shield, and have thus undertaken to comply with the data protection standards of the EU.

The data of users is typically processed for market research and advertising purposes. This makes it possible, for example, to create a usage profile based on user behavior and the interests derived from it. These usage profiles can, in turn, be used for purposes such as deploying advertisements inside and outside the platforms that presumably correspond to the interests of the user. For these purposes, cookies in which the user behavior and interests of the user are recorded are typically stored on users’ computers. In addition, data can also be stored in the usage profiles independently from the devices used by the users (particularly if the users are members of the respective platforms and are logged into them).

The processing of the personal data of users takes place on the basis of our legitimate interests in effectively informing users and communicating with users in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. If the users are asked for consent to the data processing by the respective providers (i.e. by signaling consent by checking a box or clicking a button), the legal basis of the processing is Art. 6 Para. 1 S. 1 lit. a and Art. 7 GDPR.

Further information on the processing of your personal data and on your options for objection can be found through the link of the respective provider listed below. The assertion of rights to information and other rights of data subjects can also take place by contacting the providers, since only they have direct access to users’ data and possess corresponding information. As a matter of course, we are available for questions and will assist you if you need help. Provider:

Facebook
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Instagram
Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Privacy policy/opt-out: http://instagram.com/about/legal/privacy/.

Google/YouTube
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy policy: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

LinkedIn
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Xing
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany
Privacy policy/opt-out: https://privacy.xing.com/de/datenschutzerklaerung

Twitter
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
Privacy policy: https://twitter.com/de/privacy
Personalization and privacy settings: https://twitter.com/personalization
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

XII.    Rights of the Data Subject

If we process your personal data, you are a data subject as defined by the GDPR, and you are entitled to the following rights from us as the controller:

1.    Right to Information

You can require that we as the controller confirm whether we have processed personal data concerning you.
If such processing has been done, you can require us to provide the following information:

  1. (1) the purposes for which the personal data is being processed;
  2. (2) the categories of personal data that are being processed;
  3. (3) the recipients or categories of recipients to whom the personal data concerning you has been disclosed or will yet be disclosed;
  4. (4) the planned duration of the storage of the personal data concerning you or, if specific information is not possible regarding this, the criteria for setting the duration of storage.
  5. (5) the existence of a right to correction or deletion of the personal data concerning you, a right to restrict the processing by the controller or a right to opt out from this processing;
  6. (6) the existence of a right to file a complaint with the regulatory authority;
  7. (7) all available information about the origin of the data if the personal data has not been collected from the data subject;
  8. (8) the existence of an automated decision-making process, including profiling according to Art. 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as

the import and intended impact of such processing for the data subject.
You have the right to request information about whether the personal data concerning you has been transmitted to a third country or an international organization. You can request to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

2.    Right to Correction

You have a right to have us as the controller correct and/or complete the data if the personal data concerning you that has been processed is incorrect or incomplete. We will make the correction immediately.

3.    Right to Restrict Processing

Under the following conditions you can request that the processing of the personal data concerning you be restricted:

  1. (1) if you contest the correctness of the personal data regarding you for a period that enables the controller to review the correctness of the personal data;
  2. (2) the processing is unlawful, and you decline the deletion of the personal data and instead request that the use of personal data be restricted;
  3. (3) the controller no longer requires the personal data for the purpose of processing, but you need it in order to assert, exercise, or defend legal claims, or
  4. (4) if you have opted out of the processing according to Art. 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of the personal data concerning you has been restricted, this data may – aside from its storage – be processed only with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another individual or legal person, or for reasons of a vital public interest of the European Union or a member state.
If processing has been restricted according to the aforementioned conditions, you will be informed by the controller before the restriction is lifted.

4.    Right to Deletion

a)    Deletion Obligation
You can require us as the controller to delete the personal data concerning you, and we are obligated to delete this data immediately if one of the following reasons applies:

  1. (1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. (2) You withdraw your consent, on which the processing according to Art. 6 Para. 1 S. 1 lit. a or Art. 9 Para. 2 lit. a GDPR was based, and there is no other legal basis for the processing.
  3. (3) You opt out of the processing according to Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you opt out of processing according to Art. 21 Para. 2 GDPR.
  4. (4) The personal data concerning you has been processed unlawfully.
  5. (5) The controller is required to delete personal data concerning you in order to fulfill a legal obligation under European Union law or the law of the member states that applies to them.
  6. (6) The personal data concerning you was collected with regard to the services offered by an information society according to Art. 8 Para. 1 GDPR.

b)    Information to Third Parties
If we have made the personal data that concerns you public, we are obligated to delete it according to Art. 17 Para. 1 GDPR. Furthermore, taking into account available technology and implementation costs, we take appropriate measures, including of a technical nature, to inform the persons responsible for data processing and who process personal data that you as the data subject have requested that they delete all links to this personal data or copies or replications of this personal data.

c)    Exceptions
The right to deletion does not exist as long as processing is required

  1. (1) to exercise the right to freedom of speech and information;
  2. (2) to fulfill a legal obligation, which requires the processing of data under European Union law or the law of the member states that applies to the controller, or to fulfill a responsibility that is in the public interest or in the exercise of public authority that has been vested in the controller.
  3. (3) for public interest reasons in the area of public health according to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
  4. (4) for archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes according to Art. 89 Para. 1 GDPR as long as the right specified under section a) presumably makes impossible or seriously impairs the realization of the goals of this processing, or
  5. (5) for the assertion, exercise, or defense of legal claims.

5.    Right to Notification

If you have asserted the right to correction, deletion, or restriction of processing against us as the controller, we are obligated to notify all recipients to whom the personal data concerning you was made public, about this correction or deletion of the data or restriction of processing unless this turns out to be impossible or involves a disproportionate effort.
You have the right to be informed about these recipients by us.

6.    Right to Data Portability

You have the right to receive the personal data concerning you that you have made available to us as the controller in a structured, standard, and machine-readable format. You also have the right to transmit this data to another controller, to whom the personal data was made available, without our interference, as long as

  1. (1) the processing is based on consent granted according to Art. 6 Para. 1 S. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or an agreement according to Art. 6 Para. 1 S. 1 lit. b GDPR and
  2. (2) the processing is done using automation.

In exercising this right, you have the right in turn to cause the personal data concerning you to be directly transmitted from one controller to another controller as long as this is technically feasible. This must not impair the freedoms or rights of other persons.
The right to data portability does not apply to the processing of personal data that is required to fulfill a responsibility that is in the public interest or in the exercise of public authority that has been vested in the controller.

7.    Right to Opt Out

You have the right, for reasons that arise from your particular situation, to opt out at any time from the processing of personal data concerning you resulting from Art. 6 Para. 1 S. 1 lit. e or f GDPR; this also applies to any profiling based on these regulations.
The controller will no longer process the personal data concerning you unless it can provide compelling and legitimate reasons for the processing that outweigh your interests, rights, and freedoms or the processing serves the assertion, exercise, or defense of legal claims.
If personal data concerning you is processed in order to conduct direct advertising, you have the right to opt out from the processing of the personal data concerning you for the purpose of such advertising at any time; this also applies to profiling to the extent that it is associated with such direct advertising. If you opt out of the processing for purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes.
You have the option, in connection with the use of services of an information society – regardless of Directive 2002/58/EU – to exercise your opt-out right by means of automated processes in which technical specifications are used.

8.    Right to Withdrawal of Data Privacy Consent

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the legality of processing until withdrawal as previously consented.

9.    Automated Decision in an Individual Case, Including Profiling

You have the right not to be subjected to a decision exclusively based on automated processing – including profiling – that has legal repercussions for you or significantly harms you in a similar manner. This does not apply if the decision

  1. (1) is required for the conclusion or fulfillment of an agreement between you and the controller,
  2. (2) is permitted under legal provisions of the European Union or member states that apply to the controller and these legal provisions include appropriate measures to preserve your rights and freedoms as well as your legitimate interests, or
  3. (3) is made with your express consent.

However, these decisions must not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, as long as Art. 9 Para. 2 lit. a or g GDPR does not apply and appropriate measures have been taken to protect your rights, freedoms, and legitimate interests.
Regarding the exceptional cases cited in (1) and (3), the controller takes appropriate measures to preserve your rights, freedoms, and legitimate interests, including at least the right to cause the intervention of a person on the part of the controller, to present one’s own point of view, and to contest the decision.

10.    Contact Us to Exercise Your Right as a Data Subject

You can address your right as data subject at any time informally in writing or verbally.  Please contact us or our data protection officer regarding this. You can find the contact information for this in sections I and II of this privacy policy.

11.    Right to File a Complaint with a Regulatory Authority

Regardless of any other administrative or legal remedy, you have the right to file a complaint with a regulatory authority, particularly in the member state of your place of residence, your place of employment, or the place of the alleged violation, if you believe that the processing of the personal data concerning you violates the GDPR.
The regulatory authority to which the complaint is submitted informs the complainant about the status and results of the complaint, including the possibility of a legal remedy according to Art. 78 GDPR.
The responsible regulatory authority (state data privacy authority) is:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit
Postfach 900455
99107 Erfurt
Häßlerstraße 8
99096 Erfurt
poststelle@datenschutz.thueringen.de

XIV. Duties of Information in the Collection of Personal Data in the Job Application Procedure

Analytik Jena attaches a great deal of importance to the protection of your personal data. In the following, we provide information on the collection, processing, and usage of your data in the context of online applications.

1. Legal Basis and Purpose of Data Processing

We process your personal data in consideration of the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG-new), and all other relevant laws (e.g. the German Works Constitution Act [BetrVG], the German Working Hours Act [ArbZG], etc.).
First and foremost, the collection and processing of data serves the purpose of the application procedure. The primary legal basis for this is Art. 88 GDPR in conjunction with Section 26 Para. 1 BDSG-new.
If required, we also process your data on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR in order to protect the legitimate interests of ourselves or of third parties (e.g. authorities). This applies particularly in the case of the investigation of criminal acts (legal basis: Section 26 Para. 1 sentence 2 BDSG) or within the Group for purposes of Group management, internal communications, and other administrative purposes.
In addition, we would like to point out that the transmitted data may potentially be used to prepare statistics on the online application process. The evaluation of the corresponding data takes place exclusively for our own purposes, and always in anonymized form.
If we would like to process your personal data for a purpose other than those listed above, we will inform you of this in advance.

2. Which Data Categories Do We Use, and Where Do They Come From?

In particular, the categories of personal data processed include

  • your master data (such as first name, last name, name affixes, nationality),
  • contact data (e.g. your private address, email address, [mobile] phone number),
  • your resumé, training, education
  • eventually special categories of personal data such as health data if you include these in your resumé.

Your personal data is generally collected directly from you in the context of the application process. Under specific circumstances, your personal data is also collected from other sources (particularly authorities) on the basis of statutory provisions. In addition, we may have obtained data from third parties (e.g. recruitment agencies).
If we would like to collect your data in an individual case from a source that is not directly from you, will inform you of this in advance.

3. Data Access

Inside our Company, your personal data is only received by the persons and units (e.g. HR department, employee representative body, representative body for severely disabled employees, department heads) which are responsible for the handling of the application procedure and are decision-makers on the application result.

4. Rights of Data Subjects

You can request information on the data stored about you from the address specified above. In addition, you can request the rectification or deletion of your data subject to certain requirements. You can also be entitled to a right to the restriction of the processing of your data as well as a right to the issuance of the data you have provided in a structured, common, and machine-readable format.
In such an event, please contact: datenschutz@analytik-jena.de.
Deletion results in the termination of the application procedure, and no more information can subsequently be issued on the course of the procedure. After the establishment of an employment relationship, the rights to deletion of data or restriction of processing are restricted.
To exercise these rights, data subjects can contact the responsible persons within the Company, the data protection officer, or the supervisory authorities.

5. Storage of Your Data

We delete your personal data as soon as it is no longer needed for the purposes specified above.
If we conclude an employment contract with an applicant, the transmitted data is stored for the purpose of handling the employment relationship in consideration of the applicable statutory provisions.
If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after announcement of the rejection, provided deletion does not obstruct any other legitimate interests of the persons responsible for the processing. “Other legitimate interests” in this context may include a burden of proof in proceedings under the German General Treatment Act (AGG).
If, on the basis of your application, we are of the opinion that your application could be interesting for future job openings, we will store your application information for 12 month if you explicitly consent to continued use. Even in this event, your data will not be shared with third parties at any time.

6. Data Transmission

No transmission of data outside of the European Economic Area (EEA) takes place.

7. Obligation of Data Provision

In the context of the application procedure, you must provide the personal data that is required for the establishment of the employment relationship or which we are legally obligated to collect. Without these data, we will be unable to implement an employment contract with you.

XIII.    Security

We take technical and organizational security measures to protect your incidental or intentionally collected personal data, particularly against accidental or deliberate manipulation, loss, destruction, or against an attack by unauthorized persons.
Our website is SSL-encrypted (https).
Our security measures are being continuously improved in line with technological developments. However, we cannot assume any liability for the security of data transmission over the internet. Email messages are not encrypted. Personal data generated from email communication is usually transmitted from your computer over an unsecured connection via the internet. Information that you send by unencrypted email can be intercepted by third parties, stored, and misused. Therefore, access by third parties cannot be ruled out. Consequently, it is recommended to send confidential information exclusively by postal mail.

– End of the Privacy Policy –

 

 

The newsletter of Analytik Jena frequently keeps you posted about:

Sign up here