Data protection & legal matters

Privacy Policy

We, m:con – mannheim:congress GmbH, Rosengartenplatz 2, 68161 Mannheim, represented by the Managing Director Bastian Fiedler, info@mcon-mannheim.de, see also our Masthead, are a company, which is among others specialised in the planning, the organisation and execution of events of all kinds, in particular of congresses (of a medical-scientific kind), (scientific) conferences, General Meetings, trade fairs, exhibitions, seminars, further training events as well as other commercial events. The events are carried out in the Congress Center Rosengarten Mannheim or other venues by ourselves or supervised as a service provider for another organiser. Having given this initial introduction we would like to satisfy our information obligations pursuant to Art. 13 and Art. 14 GDPR.

§ 1 CON­TACT DATA OF THE DATA CON­TROL­LER & OF THE DATA PRO­TEC­TION OF­FI­CERS

The data controller pursuant to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) is m:con – mannheim:congress GmbH, Rosengartenplatz 2, 68161 Mannheim, represented by the Managing Director Bastian Fiedler, info@mcon-mannheim.de, see also our Masthead. You can contact our data protection officer under datenschutz@mcon-mannheim.de or our postal address with the supplement “the data protection officer”.

§ 2 IN­FOR­MA­TI­ON ABOUT THE COLLEC­TION OF PER­SO­NAL DATA

(1) We will inform you below about the collection of personal data when using our website. Personal data are all data, which refer to you personally, e.g. name, address, email addresses, user behaviour (hereinafter referred to as “personal data” or only “data”).

(2) If you contact us by email or via a contact form the personal data communicated by you (your email address, if applicable your name and your telephone number) will be stored by us in order to answer your questions or to process your concern. We will erase the personal data produced in this connection with your contact request after the storage is no longer necessary or we will limit the processing, if statutory storage obligations exist. The legal basis is Art. 6 Para. 1 S. 1 lit. a, f GDPR. If your contact aims at the conclusion of a contract with us then the legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR. 

(3) If we resort to commissioned service providers for individual functions of our website or would like to use your personal data for advertising purposes we will inform you about the respective activities in detail below. 

§ 3 YOUR RIGHTS

(1) You have the following rights towards us with regard to the personal data relating to you:

• Right to information,
• Right to rectification or erasure,
• Right to limitation of the processing,
• Right to object to the processing,
• Right to data portability.

(2) You moreover have the right to lodge a complaint as a data protection supervisory authority about the processing of your personal data by us.

§ 4 COLLECTION OF DATA DURING A VISIT BY COOKIES

§ 5 DATENERHEBUNG ZUR DURCHFÜHRUNG VORVERTRAGLICHER MASSNAHMEN UND ZUR VERTRAGSERFÜLLUNG

(1) Art und Umfang der Datenverarbeitung
Im vorvertraglichen Bereich und bei Vertragsschluss erheben wir personenbezogenen Daten über Sie. Dies betrifft beispielsweise Vor- und Nachname, Anschrift, E-Mail-Adresse, Telefonnummer oder Bankverbindung.

(2) Zweck und Rechtsgrundlage der Datenverarbeitung
Diese Daten erheben und verarbeiten wir ausschließlich zum Zweck der Vertragsdurchführung bzw. zur Erfüllung vorvertraglicher Pflichten. 
Die Rechtsgrundlage hierfür ist Art. 6 Abs. 1 lit. b) DS-GVO. Besteht darüber hinaus eine Einwilligung von Ihnen, ist zusätzlich Rechtsgrundlage Art. 6 Abs. 1 lit. a) DS-GVO.

(3) Speicherdauer
Die Daten werden gelöscht, sobald sie für den Zweck Ihrer Verarbeitung nicht mehr erforderlich sind.
Es können darüber hinaus gesetzliche Aufbewahrungspflichten bestehen, beispielsweise handels- oder steuerrechtliche Aufbewahrungspflichten nach dem Handelsgesetzbuch (HGB) oder der Abgabeordnung (AO). Sofern solche Pflichten zur Aufbewahrung bestehen, sperren oder löschen wir Ihre Daten mit Ende dieser Aufbewahrungspflichten.

§ 6 DATENÜBERMITTLUNG 

Wir geben Ihre personenbezogenen Daten nur an Dritte weiter, wenn:

(1) Sie hierzu Ihre ausdrückliche Einwilligung nach Art. 6 Abs. 1 lit. a) DS-GVO erteilt haben.

(2) Dies gesetzlich zulässig und nach Art. 6 Abs. 1 lit. b) DS-GVO zur Erfüllung eines Vertragsverhältnisses mit Ihnen oder der Durchführung vorvertraglicher Maßnahmen erforderlich ist.

(3) Nach Art. 6 Abs. 1 lit. c) DS-GVO für die Weitergabe eine rechtliche Verpflichtung besteht.

(4) Gesetzlich verpflichtet sind wir zur Übermittlung von Daten an staatliche Behörden, z.B. Steuerbehörde, Sozialversicherungsträgern, Krankenkassen, Aufsichtsbehörden und Strafverfolgungsbehörden. 

(4) Die Weitergabe nach Art. 6 Abs. 1 lit. f) DS-GVO zur Wahrung berechtigter Unternehmensinteressen, sowie zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen erforderlich ist und kein Grund zur Annahme besteht, dass Sie ein überwiegendes schutzwürdiges Interesse an der Nichtweitergabe Ihrer Daten haben. 

§ 5 FUR­THER FUNC­TIONS AND OF­FERS OF OUR WEB­SITE

(1) Besides the purely informative use of our website we offer various services, which you may use in case of interest. For this purpose you must, as a rule, enter further data, which we use to provide the respective service and for which, the previously stated principles regarding data processing apply.

(2) We partly use external service providers for the processing of your data. These were selected carefully by us and commissioned, are bound to our instructions and are controlled regularly.

(3) Insofar as our service providers or partners have their registered seat in a state outside the European Economic Area (EEA), we inform you about the consequences of this circumstance in the description of the offer.

§ 6 NEWSLETTER

(1) With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent to the receipt of a newsletter and given here as a summary once again:

We, m:con – mannheim:congress GmbH, are a company, which is among others specialised in the planning, the organisation and execution of events of all kinds, in particular of congresses (of a medical-scientific kind), (scientific) conferences, General Meetings, trade fairs, exhibitions, seminars, further training events as well as other commercial events. The events are carried out in the Congress Center Rosengarten Mannheim or other venues by us as organiser or supervised as a service provider for another organiser. The entire content of the declaration of consent, which is shown within the registration process for the newsletter-subscription, can be called here once again. Your consent is necessary, which we hereby request, for the sending of information to your email address.

(2) We use the so-called Double-opt-in-process for the registration to our newsletter. This means that we will send you an email to the stated email address after your registration, in which we request you for confirmation that you request the sending of the newsletter. Only after the confirmation of your registration will you receive the newsletter. In addition, we respectively store your used IP addresses and times of the registration and confirmation. The purpose of the procedure is to prove your registration and, if applicable, to be able to clarify a possible misuse of your personal data.

(3) The mandatory detail for the sending of the newsletter is solely your email address. The entry of further, separately marked data is voluntary and is used in order to be able to address you personally. After your confirmation we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR.

(4) Pursuant to Art. 7 Para. 3 GDPR you can revoke your consent to the sending of the newsletter at all times with effect for the future and cancel the newsletter. You can declare the revocation by email simply by clicking on the link provided in each newsletter email.

(5) We would like to point out to you that we evaluate your user behaviour with the despatch of the newsletter. For this evaluation the sent emails include so-called web beacons or tracking pixel, which present one-pixel-image files that are stored on our website.

Data are exclusively collected pseudonymised, the IDs are therefore not linked with your further personal data, a direct ability for reference to a person is excluded.

(6) For the sending of our newsletter we use the Newsletter-Tool of the DIN ISO/IEC 27001-certified company CleverReach. We create and manage the newsletter herewith. The necessary data of the newsletter recipient are made available in this respect web-based on a server of CleverReach. Merely we, as the data controller, have access hereto. The cooperation between us and CleverReach is carried out on the basis of a contractual agreement. The General Business Terms and Conditions of CleverReach can be called under www.cleverreach.com/de/agb/.  The handling of the data conform to data protection is ensured therein under the section data protection as well as under https://www.cleverreach.com/de/datensicherheit/ .

(7) The Newsletter-Tool analyses the range of the newsletter. With the sending of your data in our newsletter form, you declare that you agree with the data processing by CleverReach to the extent that can be seen. The following cookies are used hereby:

§ 7 ON­LINE JOB AP­P­LI­CA­TI­ONS AND PU­BLI­CA­TI­ON OF JOB AD­VER­TI­SE­MENTS

We offer you the possibility to apply for vacancies in our company by email or by post. With these applications your applicant and application data are collected electronically and processed by us for the processing of the application procedure. The legal basis for this is Section 26 Para. 1 S. 1 German Federal Data Protection Act [Bundesdatenschutzgesetz – BDSG] in conjunction with Art. 88 Para. 1 GDPR.

Insofar as an employment contract is concluded after the application procedure data processing will be carried out for the purpose of the employment relationship. We thus store your data transmitted with the application in your personnel file for the purpose of the customary organisation and administration process. The legal basis for this processing is also Section 26 Para. 1 S. 1 BDSG in conjunction with Art. 88 Para. 1 GDPR.

If an application is rejected we shall erase the data transmitted to us automatically three months after the announcement of the rejection. The erasure will, however, not be carried out if the data require a longer storage of up to four months or until the conclusion of court proceedings owing to statutory provisions, for example owing to the evidentiary obligations according to the German General Act on Equal Treatment [Allgemeines Gleichbehandlungsgesetz – AGG]. The legal basis in this case is Art. 6 Para. 1 lit. f GDPR and Section 24 Para. 1 No. 2 BDSG. Our legitimate interest lies in the defence or assertion of rights.

Insofar as you explicitly consent to a longer storage of your data, for example for your inclusion in a candidate or interested party database, the data will continue to be processed owing to your consent. The legal basis is then Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at all times according to Art. 7 Para. 3 GDPR by a declaration towards us with effect for the future.

§ 8 SOCIAL-MEDIA-Channels

(1) In order to advertise our products and services as well as for the communication with interested parties and customers, we operate corporate profiles on various social media platforms, to which we provide links.

(2)When you visit our website principally no personal data are forwarded to the respective operator of the social media platform.

(3) A forwarding of personal data through your visit to the website to the operator of the respective social media platform will only be carried out if you are already logged into the platforms. 

(4) We neither have any influence on the collected data and data processing activities, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage deadlines. Neither is any information available to us regarding the erasure of the collected data by the plugin provider.

(5) The respective platform operator stores the data collected in relation to you as usage profiles and uses these, if applicable, for the purpose of advertising, market research and/or to design its platform suitable for the needs. Such an evaluation is in particular carried out (also for users who are not logged in) in order to present advertising suitable for the needs and to inform other users of the social network about your activities on our website. You are entitled to a right to object to the formation of these user profiles, whereby you must contact the respective operator of the platform in order to exercise this right. Via the social media button we offer you the possibility to interact with the social networks and other users so that we can improve our offer and design it more interesting for you as a user. The legal basis for the use of the plugins is Art. 6 Para. 1 S. 1 lit. a GDPR.

(6) We hereby use the following social media channels for the website www.mcon-mannheim.de

a. Twitter

i. In order to advertise our products and services as well as for the communication with interested parties and customers we use the short message service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter: Twitter).

ii. Data processed by Twitter

We have no influence on the type and manner of the data processing by Twitter. Twitter is responsible for the data processing in connection with the use of the short message service. The use of the functions of Twitter is carried out at the user’s own responsibility. This shall in particular apply to the use of the interactive functions (e.g. share, assess).

For persons living outside of the United States Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland is the data controller.

You can refer to the privacy statement of Twitter with regard to what extent data are processed by Twitter, cf. here https://twitter.com/de/privacy or refer to the FAQ section of Twitter, https://gdpr.twitter.com/de/faq.html.

iii. Data processed by us

We do not collect any data via our Twitter account. In particular no tracking takes place on the website. The data entered by you with Twitter, in particular your user name and the contents published under your account, are merely processed by us to the extent that we, if applicable retweet your Tweets or reply to these or write Tweets ourselves, which refer to your account. The data published and distributed freely by you on Twitter will thus be included by us and made accessible to its followers.

iv. Transmission to third parties or to a third country

We would like to point out that there is the possibility that data of the users are processed outside of the European Union, in particular in the USA. This can lead to increased risks for the users to the extent that e.g. the later access to the user data can be made more difficult. Neither do we have any access to these user data. The access possibility lies exclusively with Twitter. Twitter Inc. is certified under the Privacy Shield and has therefore obligated to comply with the European data protection standards.

You can find the data protection notices of Twitter under https://twitter.com/de/privacy.

The legal basis for the processing of personal data carried out hereby and depicted below is Art. 6 Para. 1 lit. a GDPR. 

b. YouTube

i. In order to advertise our products and services as well as for the communication with interested parties and customers we use the internet video portal of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC, is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Youtube).    

ii. We have no influence on the type and manner of the data processing by Youtube. Youtube is responsible for the data processing in connection with the use of the Youtube channel. The use of the functions of Youtube is carried out at the user’s own responsibility. This shall in particular apply to the use of the interactive functions (e.g. share, assess, submission of comments). Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 is responsible for persons living outside of the United States. You can refer to the privacy statement of Youtube with regard to what extent data are processed by Youtube, cf. https://policies.google.com/privacy?hl=de&gl=de. 

iii. We do not collect any data via our Youtube channel. The data entered by you with Youtube, in particular your user name and the contents published under your account, are merely processed by us to the extent that we, if applicable, share your comments or reply to these or also write comments ourselves, which refer to your account. The data published and distributed freely by you on Youtube are thus included by us and made accessible to its followers.

iv. Transmission to third parties or to a third country
We would like to point out that there is the possibility that data of the users are processed outside of the European Union, in particular in the USA. This can lead to increased risks for the users to the extent that e.g. the later access to the user data can be made more difficult. Neither do we have any access to these user data. The access possibility lies exclusively with Youtube. Youtube has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. 

v. The legal basis for the processing of personal data carried out hereby and depicted below is Art. 6 Para. 1 lit. f GDPR.

vi. You can find further information under the data protection notices of Youtube under https://policies.google.com/privacy?hl=de&gl=de.
 

c. Facebook

i. For the advertising of our products and services as well as for the communication with interested parties and customers we operate a company presence on the Facebook platform.

ii. On this social media platform we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, (hereinafter: Facebook).    
The data protection officer of Facebook can be contacted via a contact form, https://www.facebook.com/help/contact/540977946302970 .
We as (co-)data controller of the Fan-Pages with Facebook have concluded an agreement with regard to the respective obligations within the meaning of the GDPR.  
This agreement, from which the reciprocal obligations can be derived, can be called under the following link https://www.facebook.com/legal/terms/page_controller_addendum.

It principally applies:

• Facebook and we as the site administrator are co-data controllers and have concluded a joint agreement , in which our respective obligations under the GDPR are regulated.
• Facebook is primarily responsible for making information available to the user about the joint processing and enabling him to exercise his rights to which he is entitled pursuant to the GDPR. Pursuant to the GDPR the user has the right to information , rectification, portability  and erasure of his data as well as to object to the processing of his data and to limitation of the processing. In the Facebook-settings the user can find out more about these rights.
• the Irish data protection commission exercises the supervision over Facebook.  The user has the right to lodge a complaint at the Irish data protection commission (see https://www.dataprotection.ie/) or at a local supervisory authority.

iii. When you visit our Facebook fan page  Facebook processes personal data from you.
A part of these data is made available to us via the so-called “Insights” (user statistics) in an aggregated form by Facebook. For this purpose Facebook stores a cookie on the user’s terminal device. 

We exclusively receive the user statistics in an anonymised form. We have no access to or insight into the respective underlying data.

iv. Facebook in particular uses the data collected within the scope of the fan page visit in order to distribute individualised advertising via its network. For more detailed information in this respect please refer to: https://www.facebook.com/policies/. We use the gained information in order to optimise our offer on Facebook. Based on the entered information we also receive demographic and geographical evaluations from Facebook, which we use specifically in order to place interest-based advertisements, however without receiving direct knowledge of the identity of a visitor. If a user uses Facebook on several technical devices the entry and evaluation can also be carried out cross-device if it concerns registered visitors who are respectively registered in their own profile.

v. The legal basis for the processing of personal data carried out hereby and depicted below is Art. 6 Para. 1 lit. f GDPR. When our online presence is called on the Facebook platform data of the user are processed by Facebook Ireland Ltd. as operator of the platform within the EU.

These data of the user serve for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses these data for market research and advertising purposes as well as for the creation of profiles of the users. Based on these profiles it is, for example, possible for Facebook Ireland Ltd. to provide the users interest-related advertising within and outside of Facebook. If the user is logged into his account on Facebook at the time of the call Facebook Ireland Ltd. can moreover link the data with the respective user account. 

In the event of a contact of the user via Facebook the personal data of the user entered during this opportunity will be used in order to process the request. The data of the user will be erased in our company insofar as the user’s request has been finally answered and this is not opposed by any statutory storage obligations, such as e.g. with a subsequent contract processing.

Cookies are, if applicable, also used for the processing of the data by Facebook Ireland Ltd. Should the user not agree with this processing then there is the possibility to prevent the installation of the cookies by a corresponding setting of the browser. Already stored cookies can also be erased at all times. The settings in this respect depend on the respective browser. Should the user prevent or restrict the installation of the cookies, this can lead to the fact that not all functions can be used by Facebook in full.
More detailed information regarding the processing activities, their prevention and the erasure of the data processed by Facebook can be found in the data policy of https://www.facebook.com/policy.php.

It is not excluded that the processing by Facebook Ireland Ltd. is also carried out via Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025 in the USA. Facebook Inc. has submitted itself to the EU-US Privacy Shield and hereby declares the compliance with the data protection stipulations of the EU when processing the data in the USA.

vi. Further information pertaining to the data collection: : http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications sowie http://www.facebook.com/about/privacy/your-info#everyoneinfo.

d. Instagram

i. For the advertising of our products and services as well as for the communication with interested parties and customers we operate a company presence on the Instagram platform. Instagram is part of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter: Instagram)

ii. The European Court of Justice (ECJ) decided with the judgement of 05.06.2018 (File no.: C-210/16) that the operator of a Facebook fan page is jointly responsible with Facebook for the processing of personal data of the visitors of its site.As the Instagram Business Account in the scope of services and functionality is comparable with a Facebook fan page, the principles from the judgement can be applied to Instagram. 

iii. On this social media platform we are jointly responsible with Instagram. The data protection officer of Instagram can be contacted via a contact form, https://www.facebook.com/help/contact/540977946302970 .We as (co-)data controller of the fan pages have concluded an agreement with Instagram with regard to the respective obligations within the meaning of the GDPR.  This agreement, from which the reciprocal obligations can be derived, can be called under the following link https://www.facebook.com/legal/terms/page_controller_addendum.  

It principally applies:

• Instagram and we as the site administrator are co-data controllers and have concluded a joint agreement , in which our respective obligations under the GDPR are regulated.
• Instagram is primarily responsible for making information available to the user about the joint processing and enabling him to exercise his rights to which he is entitled pursuant to the GDPR. Pursuant to the GDPR the user has the right to information, rectification, portability and erasure of his data as well as to object to the processing of his data and to limitation of the processing. In the Facebook-settings the user can find out more about these rights.
• the supervision over Instagram is exercised by the Irish data protection commission.  The user has the right to lodge a complaint at the Irish data protection commission (see https://www.dataprotection.ie/) or at a local supervisory authority.

iv. If you visit our Instagram fan page Instagram processes personal data from you. A part of these data is made available to us via the so-called “Insights” (user statistics) in an aggregated form by Instagram. For this purpose Instagram stores a cookie on the terminal device of the user. We exclusively receive the user statistics in an anonymised form. We have no access to or insight into the respective underlying data.

v. Instagram in particular uses the data collected within the scope of a visit to the fan page in order to distribute individualised advertising via its network. You can find out more detailed information relating to the here: https://www.facebook.com/policies/cookies/ or https://help.instagram.com/519522125107875.We use the gained information in order to optimise our offer on Facebook.

Based on the entered information we also receive from Instagram demographic and geographical evaluations, which we use specifically in order to place interest-based advertisements, however without gained direct knowledge of the identity of a visitor. If a user uses Facebook on several technical devices the entry and evaluation can also be carried out cross-device if it concerns registered visitors who are respectively registered in their own profile.

​​​​​​​vi. The legal basis for the processing of personal data carried out hereby and depicted below is Art. 6 Para. 1 lit. f GDPR. When our online presence is called on the Instagram platform Instagram as operator of the platform will process data of the user within the EU.

These data of the user serve as statistical information about the use of our company presence on Instagram. Instagram uses these data for market research and advertising purposes as well as for creating profiles of the users. Based on these profiles it is, for example, possible for Instagram to provide interest-related advertising for the users within and outside of Instagram. If the user is logged into his account on Facebook at the time of the call Instagram can moreover link the data with the respective user account.        

In the event of a contact of the user via Instagram the personal data of the user entered during this opportunity will be used for processing the request. The data of the user will be erased in our company insofar as the request of the user has been finally answered and this is not opposed by any statutory storage obligations, such as e.g. with a subsequent contract processing.

Cookies are also, if applicable, used by Instagram for processing the data. Should the user not agree with this processing there is the possibility to prevent the installation of the cookies by a corresponding setting of the browser. Already stored cookies can also be erased at all times. The settings in this respect depend on the respective browser. Should the user prevent or restrict the installation of the cookies, this can lead to the fact that not all functions can be used by Instagram in full.

More detailed information regarding the processing activities, their prevention and the erasure of the data processed by Facebook can be found in the data policy of https://www.facebook.com/policy.php.

It is not excluded that the processing by Instagram is also carried out through parent companies in the USA, Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025. The parent company has submitted itself to the EU-US Privacy Shield and declares hereby the compliance with the data protection stipulations of the EU with the processing of the data in the USA.

​​​​​​​vii. Further information pertaining to the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.

e. XING

i. For the advertising of our products and services as well as for the communication with interested parties and customers we operate a company presence on the XING platform.

ii. The European Court of Justice (ECJ) decided with the judgement of 05.06.2018 (File no.: C-210/16) that the operator of a Facebook fan page is jointly responsible with Facebook for the processing of personal data of the visitors of its site. As the XING account in the scope of services and functionality is comparable with a Facebook fan page, the principles from the judgement can be applied to XING -In. 

iii. On this platform we are jointly responsible with New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, Tel.: +49 40 419 131-0, Fax: +49 40 419 131-11, email: info@xing.com for our company fan page.

The data protection officer of XING can be contacted via email: Datenschutzbeauftragter@xing.com or by post under Dammtorstraße 30, 20354 Hamburg, Germany.

We have as (co-)data controller of our company channel concluded an agreement with Facebook with regard to the respective obligations within the meaning of the GDPR. 

This agreement, from which the reciprocal obligations can be derived, can be called under the following link https://www.facebook.com/legal/terms/page_controller_addendum.

It principally applies:

• XING and we as the site administrator are co-data controllers.
• XING is primarily responsible for making information available to the user about the joint processing and enabling him to exercise the rights to which he is entitled pursuant to the GDPR. Pursuant to the GDPR the user has the right to information, rectification, portability and erasure of his data as well as to object to the processing of his data and to limitation of the processing. In the LinkedIn settings the user can find out more about these rights.
• the supervision over XING is exercised by the Hamburg officer for data protection and freedom of information, Ludwig-Erhard-Str 22, 7th floor., 20459, Tel.: +49 (0)40 428 54 4040, Fax: +49 (0)40 / 428 54 – 4000, email: mailbox@datenschutz.hamburg.de.

iv. When you visit our XING page XING processes personal data from you. A part of these data is made available to us via the so-called “XING” (user statistics) in an aggregated form by XING. For this purpose XING stores a cookie on the terminal device of the user.  We exclusively receive the user statistics in an anonymised form. We have no access to or insight into the respective underlying data.

​​​​​​​v. The data collected within the scope of XING are in particular used by XING in order to distribute individualised advertising via its network. You can find more detailed information pertaining to the here: https://privacy.xing.com/de/datenschutzerklaerung/druckversion. We use the gained information in order to optimise our offer on XING. Based on the entered information we also receive demographic and geographical evaluations from XING, which we use specifically in order to place interest-based advertisements without however directly gaining knowledge of the identity of a visitor. If a user uses XING on several technical devices, the entry and evaluation can also be carried out cross-device if it concerns registered visitors who are respectively registered in their own profile.

vi. ​​​​​​​The legal basis for the processing of personal data carried out hereby and depicted below is Art. 6 Para. 1 lit. a GDPR.  When calling our online presence on the XING platform data of the user are processed by XING as operator of the platform within the EU.

These data of the user serve for statistical information about the use of our company presence on XING. XING uses these data for market research and advertising purposes as well as in order to create profiles of the users. Based on these profiles it is, for example, possible for LinkedIn to provide interest-related advertising for the users within and outside of LinkedIn. If the user is logged into his account on LinkedIn at the time of the call LinkedIn can moreover link the data with the respective user account.  

In the event of a contact of the user via XING the personal data of the user entered during this opportunity will be used for processing the request. The data of the user will be erased in our company insofar as the request of the user has been finally answered and this is not opposed by any statutory storage obligations, such as e.g. with a subsequent contract processing.

​​​​​​​vii. Cookies are, if applicable, also used by XING for the processing of the data , cf. also here https://privacy.xing.com/de/datenschutzerklaerung/druckversion 

f. Linked-In

 i. For the advertising of our products and services as well as for the communication with interested parties and customers we operate a company presence on the LinkedIn platform.

ii. The European Court of Justice (ECJ) decided with the judgement of 05.06.2018 (File no.: C-210/16) that the operator of a Facebook fan page is jointly responsible with Facebook for the processing of personal data of the visitors of its site.

As the LinkedIn account in the scope of services and functionality is comparable with a Facebook fan page, the principles from the judgement can be applied to LinkedIn. 

iii. On this platform we are jointly responsible with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.  The data protection officer of LinkedIn can be reached via a contact form, https://www.linkedin.com/help/linkedin/ask/TSO-DPO. We have as (co-)data controller of the fan pages concluded an agreement with Facebook with regard to the respective obligations within the meaning of the GDPR. This agreement, from which the reciprocal obligations can be derived, can be called under the following link https://www.linkedin.com/legal/l/dpa. The supplementary agreement for the regulation of the joint responsibility can be called here: https://legal.linkedin.com/pages-joint-controller-addendum.  

It principally applies:

• LinkedIn and we as site administrator are co-data controllers.
• LinkedIn is primarily responsible making information available to the user about the joint processing and to enable him to exercise the rights to which he is entitled pursuant to the GDPR. Pursuant to the GDPR the user has the right to information, rectification, portability and erasure of his data as well as to object to the processing of his data and to limitation of the processing. In the LinkedIn settings the user can find out more about these rights.
• the supervision over LinkedIn is exercised by the Irish data protection commission.  The user has the right to lodge a complaint at the Irish data protection commission (see https://www.dataprotection.ie/) or at a local supervisory authority.

iv. When you visit our LinkedIn page LinkedIn processes personal data from you. Part of these data are made available to us via Linked in (user statistics) in an aggregated form by LinkedIn. For this purpose LinkedIn stores a cookie on the terminal device of the user. We exclusively receive the user statistics in an anonymised form. We have no access to or insight into the respective underlying data.

​​​​​​​v. LinkedIn particularly uses the data collected within the scope of the LinkedIn page in order distribute individualised advertising via its network.

We use the gained information in order to optimise our offer on LinkedIn.

Based on the entered information we also receive demographic and geographical evaluations from LinkedIn, which we use specifically in order to place interest-based advertisements without however directly gaining knowledge of the identity of a visitor. If a user uses Facebook on several technical devices the entry and evaluation can also be carried out cross-device if it concerns registered visitors who are respectively registered in their own profile.

​​​​​​​vi. The legal basis for the processing of personal data carried out hereby and depicted below is Art. 6 Para. 1 lit. f GDPR, which we request within the scope of the Cookie-Consent request. 

When calling our online presence on the LinkedIn platform data of the user are processed by Linked In Ireland Unlimited Company as the operator of the platform within the EU.

These data of the user serve for statistical information about the use of our company presence on LinkedIn. LinkedIn uses these data for market research and advertising purposes as well as for creating profiles of the users. Based on these profiles it is, for example, possible for LinkedIn to provide interest-related advertising to the users within and outside of LinkedIn. If the user is logged into his account on LinkedIn at the time of the call LinkedIn can moreover link the data with the respective user account.          

In the event of a contact of the user via LinkedIn the personal data of the user that are entered during this opportunity will be used for processing the request. The data of the user will be erased in our company insofar as the request of the user has been finally answered and this is not opposed by any statutory storage obligations, such as e.g. with a subsequent contract processing.

Cookies are, if applicable, also used by LinkedIn for processing the data Cookies, cf. also here https://www.linkedin.com/legal/cookie-policy.

It is not excluded that the processing by LinkedIn is also carried out through the LinkedIn Corporation 2029 Stierlin Court, Mountain View, CA 94043, USA.

in the USA. Facebook Inc. has submitted itself to the EU-US Privacy Shield and declares hereby the compliance with the data protection stipulations of the EU when processing the data in the USA.

vii. You can find more detailed information pertaining to the here: https://www.linkedin.com/legal/privacy-policy?_l=de_DE  or  https://youtu.be/ulYtJzlI-Wg 

§ 9 GOOGLE ANALYTICS

(1) We use Google Analytics in order to analyse the use of our website and to be able to improve it regularly. Through the gained statistics we can improve our offer and design it more interesting for you as a user. For the exceptional cases, in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal base for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. a GDPR.

(2) Within the scope of your visit to our website for the first time a query will be whether you agree with the use of the Google Analytics tool. 

(3) transfer to Google in the USA and stored there. In the event of the activation of the IP anonymisation on this website, your IP address will, however, be previously abbreviated by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area. By order of the operator of this website Google will use this information in order to evaluate your use of the website, to compile reports on the website activities and to provide further services associated with the website use and the internet use towards the website operator.

(4) The IP address transmitted by your browser within the scope of Google Analytics will not be aggregated or connected with other data of Google.

(5) You can find further information about the provider of Google Analytics, Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, here:

• Terms of Use: http://www.google.com/analytics/terms/de.html,
• Overview regarding data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, 
• Privacy statement: http://www.google.de/intl/de/policies/privacy

§ 10 YOUTUBE-VIDEOS

We have integrated YouTube videos into our website, which are stored on http://www.YouTube.com and that can be played directly from our website.

Through the visit to the website YouTube receives the information that you have called the corresponding subpage of our website. This shall be carried out irrespective of whether YouTube makes a user account available, through which you are logged in, or whether no user account exists. If you are logged into Google your data will be allocated directly to your account. If you do not wish to have the allocation with your profile at YouTube you must log out before activating the button. YouTube stores your data as usage profiles and uses these for purposes of advertising, market research and/or for the design of its website suitable for the needs. Such an evaluation is in particular carried out (even for users who are not logged in) for the provision of advertising suitable for the needs and to inform other users of the social network about your activities on our website. You are entitled to a right to object to the formation of these user profiles, whereby you must contact YouTube in order to exercise this right.

You can obtain further information pertaining to the purpose and scope of the data collection and their processing by YouTube in its privacy statement. There you will also obtain further information regarding your rights and setting possibilities for the protection of your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted itself to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework .

§ 11 GOOGLE MAPS

We use the offer of Google Maps on this website. This way we can display interactive maps directly to you and enable you the convenient use of the map function.

Through the visit to the website Google receives the information that you have called the corresponding subpage of our website. Moreover, the data stated under § 4 of this statement are transmitted. This is carried out irrespective of whether Google makes a user account available through which you are logged in or whether no user account exists. If you are logged into Google your data will be allocated directly to your account. If you do not wish to have the allocation with your profile at Google you must log out before activating the button. Google stores your data as a usage profile and uses these for purposes of advertising, market research and/or for the design of its website suitable for the needs. Such an evaluation is in particular carried out (even for users who are not logged in) in order to provide advertising suitable for the needs and to inform other users of the social network about your activities on our website. You are entitled to a right to object to the formation of these user profiles, whereby you must contact Google in order to exercise this right.

You can obtain further information pertaining to the purpose and scope of the data collection and their processing by the plugin provider in the privacy statements of the provider. You can also receive further information there regarding your rights and setting possibilities in this respect for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 12 SECURITY CERTIFICATES

This website, including its subpages, uses an encrypted transmission in order to ensure security with the transmission of personal data. The encrypted transmission is carried out on the basis of the certificate. GlobalSign OrganisationSSL Wildcard.

§ 13 OB­JEC­TION TO OR RE­VO­CA­TI­ON OF THE PRO­CES­SING OF YOUR DATA

(1) If you have granted a consent to the processing of your data you can revoke this at all times for the future. Such a revocation influences the admissibility of the processing of your personal data after you have announced this to us.

(2) Insofar as we support the processing of your personal data on the weighing up of interests you can file an objection against the processing. This is the case if the processing is in particular not necessary to fulfil a contract with you, which will respectively be presented by us with the following description of the functions. When exercising such an objection we request presentation of the reasons, which is why we should not process your personal data as carried out by us. In the event of your justified objection we will examine the factual position and will either discontinue or adjust the data processing or will present our essential reasons to you that are worthy of protection, based on which we continue the processing.

(3) You can of course object to the processing of your personal data for purposes of advertising and data analysis at all times. You can inform us about your objection against advertising under the following contact data: info@mcon-mannheim.de, see also our Masthead.

[Version February 2020]