Privacy Policy
Privacy statement and information, in accordance with article 13 of the GDPR
General
Thank you for visiting our website and showing an interest in our services. As a user of our website, we take the protection of your privacy very seriously and we strictly uphold the legal data protection provisions on collecting, processing and using data. This applies in particular to the processing of your personal data.
The data controller’s name and contact details
XELIS GmbH
Kesselbachstrasse 1
88697 Bermatingen
T + 49 (7544) 9 34 02-10
info(at)xelis.de
www.xelis.de
The data protection officer’s contact details
Dipl.-Wirt.-Ing. Oliver Baldner
Tel: +49 (5221) 777-987
E-mail: datenschutz(at)avanco.de
Purposes and legal basis for the processing of personal data:
| Purposes for processing | Legal basis |
| To bring the data controller in contact with visitors to our website who use our online contact form | Article 6, paragraph 1, lit.b of the GDPR (required to fulfil the pre-contractual measures) |
| The evaluation of user behaviour using Google Analytics | Article 6, paragraph 1, lit. f of the GDPR (consent of the data subject) |
| The processing of technical information, in order to optimise the availability of services and the appearance of website information retrieved by the visitor on their end device. | Article 6, paragraph 1, lit. f of the GDPR (the data controller’s legitimate interest) |
| Execution of external codes in the JavaScript framework “jQuery” | Article 6, paragraph 1, lit. f of the GDPR (the data controller’s legitimate interest) |
| Controlling the website and the appropriate process design during the use of cookies | Article 6, paragraph 1, lit. f of the GDPR (the data controller’s legitimate interest) |
| Establishment of contact and processing of your data in the context of an application for an employment relationship | Art. 6 (1) (f) GDPR (legitimate interest of the controller) |
| Uploading and transmission of application documents | Art. 88 GDPR in conjunction with Section 26 (1) Federal Data Protection Act (BDSG)
(foundation of an employment relationship) |
In the safeguarding of the data controller’s legitimate interests and in accordance with article 6, paragraph 1, lit. f of the GDPR, if your personal data is processed, our legitimate interests are the constant analysis and improvement of the website and the optimisation of user-friendliness. If technology is used to measure reach, this will be discussed separately in the privacy statement and you will have the opportunity to object. Our legitimate interest in reach measurement is the analysis, optimisation and economic operation of our website.
Categories of personal data for processing
When using our website, the following data is processed for organisational and technical purposes:
- The visitor’s IP address
- The names of the pages retrieved
- The date and time of access
- The name of the browser used
- The name of the operating system
- The name of the search engine or external link
- The name of the data downloaded
If you transmit data using our online form, the personal data provided by you for fulfilling the relevant purposes will be processed.
If you have not objected to the use of tracking by Google Analytics or the use of cookies, we will analyse your use of the website. This includes:
- the pages retrieved
- the bounce rate
- the length of stay on each page
The user’s identity is not made known to us, nor do we employ any measures in order to obtain such information by other means. We analyse this technical data anonymously and solely for statistical purposes, in order to further optimise our website and to present our content in a more attractive manner. This anonymous data is stored separately from personal information on secure systems. Your personal data and privacy are therefore always protected.
Recipients of your personal data
Transmission of your personal data to third parties will only take place upon receipt of your consent or if legally permissible. Transmission of your personal data to authorised state institutions and authorities will only take place within the framework of the relevant laws or if we are obligated to do so following a court ruling. Our employees are sworn to confidentiality and must uphold the provisions of the laws on data protection. For the technical provision of services, we use the following companies to process data on our behalf. These are:
| Contractor | Service rendered |
| OK InterNetworking GmbH & Co. KG, Konrad-Zuse-Weg 15, D-33415 Verl | Hosting the website. Rental and operation of virtual servers in the form of order processing, in accordance with article 28 of the GDPR |
| Google Analytics | Webtracking using Google Analytics |
Subscription to the newsletter
If you have subscribed to our newsletter, we use your email address and other voluntary personal details in order to send you our newsletter on a regular basis. To receive our newsletter, it is sufficient to provide your email address.
At the end of each newsletter you will find a link, which allows you to amend your data at any time or cancel your subscription. Similarly, you can cancel your subscription by contacting us using the contact details provided in our legal notice.
Use of cookies
This website uses so-called cookies. This involves the use of small text files, which are sent from our servers to your browser and stored on your computer’s hard drive. These do not store personal data but instead use an individual pseudonym. This information is used to recognise you when navigating our pages and it makes navigation simpler.
You can adjust the settings on your browser so that you are informed about the use of cookies. This ensures the transparent use of cookies. Alternatively, you can use the website without cookies. You can preset this on your browser. Please be aware that some of the website’s functions may be partly or completely disabled as a result.
Edit analytics settings
Google Analytics
Cookies used by Google for website analyses, generating statistical data how the website is used.
Data protection notice on use of the tool Google Analytics 4
We use the tool Google Analytics 4 on our website.
The business address of the responsible service provider in the European Union (EU) / European Economic Area (EEA) is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The imprint of Google Ireland Limited can be retrieved including further information using the following link: https://www.google.de/intl/de/contact/impressum.html
Google Ireland Limited is a company of the US-based corporation Google LLC. The business address of Google LLC is: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google LLC and Google Ireland Limited are part of a US-based holding Alphabet Inc. The registered office of Alphabet Inc. corresponds to the business address of Google LLC as stated above.
How is the tool Google Analytics 4 used and for what purposes?
We only use this tool if you have consented to use of this service.
The purpose of the Google Analytics 4 tool is to analyse the use of our website by yourself (web analysis service).
Google Analytics 4 regularly makes use of what are known as cookies to analyse how you use our website. Cookies are small text files that are sent to your browser and saved to the disk on your device. They are then analysed. The information collected by the cookies is regularly transmitted to a server in Ireland and possibly in the USA, where it undergoes processing.
To perform such analysis and ensure functioning of the tool, we have implemented the code enabling the Google Analytics 4 function on our website when you visit it.
The service provider will utilise the information collected on the website to analyse how you use our website and compile reports on website activity on our behalf. The reports provided by Google Analytics 4 are used to analyse performance of our website.
The use of Google Analytics 4 on our website is always pseudonymous as long as the User-ID function is not used (see below if required).
Google Analytics 4 also allows us to analyse the success of our marketing campaigns.
The User-ID (user identifier) function enables us to assign a unique, permanent ID (identifier) to one or more sessions (and to the activity within these sessions) and so analyse user behaviour across multiple devices.
We use the function Google Signals, which collects additional information relating to users who have activated personalized advertising. This in particular includes personal interests and demographic data. It allows advertisements to be delivered to individual users of personalized advertising in cross-device remarketing campaigns.
To protect your privacy, your IP address which is transferred to the service provider is anonymized as standard procedure.
With activation of IP anonymization on this website, your IP address will be truncated by Google within the member states of the EU or in other EEA states. Only in exceptional cases will the full IP address be transferred to a server of the service provider in the USA and truncated there. According to Google, the IP address transmitted by your browser in the framework of Google Analytics 4 will not be combined with other data.
What data is processed by Google Analytics 4?
Extensive processing of personal data takes place with the use of Google Analytics 4. We process a range of data depending on the type of implementation and the option used.
Where Google Analytics 4 is implemented as standard, the following information in particular will be automatically collected:
- number of users,
- statistics for the session,
- approximate location,
- browser and device information.
If you require further information about the data collected automatically, this can be found under the following link:
https://support.google.com/firebase/answer/6317485
Information on any predefined dimensions of a user (depending on the option used) or optimized analyses and events can be retrieved using the following links:
As regards any predefined dimensions of a user:
https://support.google.com/firebase/answer/9268042
As regards any optimized analyses and events:
https://support.google.com/analytics/answer/9216061
Legal basis, revocation options and disabling of cookies:
The legal basis for the use of Google Analytics is your consent in accordance with Article 6 (1) (a) GDPR.
Where collected data and/or details of user activity are forwarded by Google Ireland Limited to Google LLC or Alphabet Inc.(parent company in the United States), such forwarding is also carried out on the basis of your consent pursuant to Article 49 (1) (a) GDPR, in conjunction with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by changing the settings in the Consent Manager using the following link:
You can prevent the collection of data generated by the cookie about your use of the website by refusing consent to setting of the relevant cookie or by installing the browser add-on disabling Google Analytics.
This add-on from Google can be retrieved at:
https://tools.google.com/dlpage/gaoptout?hl=en-GB
You can also generally prevent cookies from being set by configuring your browser to refuse all cookies by means of an appropriate setting in the browser. In such case however, functionality on this and on other websites may be impaired.
Contractual provisions, data recipients and transfer to third countries:
As a processor Google Ireland Limited processes your personal data on our behalf. To this end, we have concluded a data processing contract with Google according to Art. 28 GDPR. The data processing contract concluded here can be retrieved at:
https://business.safety.google/adsprocessorterms/
Google is entitled to engage subcontractors in the context of data processing. A list of approved subcontractors to whom personal data may be transferred can be retrieved at: https://business.safety.google/adssubprocessors/
It is possible that the data processed by Google may not only be accessed by Google LLC and Alphabet Inc. registered in the USA, but also by the US-based authorities, as this cannot be entirely ruled out due to the statutory provisions in force in the USA.
As the USA is currently deemed an unsafe country outside the EU/EEA (third country) in which you do not enjoy the same rights as in the EU/EEA, you do not fundamentally have at your disposal adequate legal remedies against access by the US authorities.
To solve this problem and afford you an appropriate level of protection, we have agreed standard contractual clauses of the EU with the service provider, which can be viewed using the following link:
https://business.safety.google/adsprocessorterms/sccs/eu-c2p/
Storage period:
The data transferred to the service provider in the framework of implementation of the Google Analytics 4 tool and linked with cookies will be automatically erased after 14 months.
In addition, data whose processing purpose has been attained will be automatically erased once a month unless a longer storage period is mandatory here.
Data protection information of the service provider
To learn more about data protection at Google in general, you can retrieve relevant information using the following link:
https://policies.google.com/privacy?hl=en#infocollect
Use of external services
Our website uses content from third parties. This may include videos, fonts or scripts. The relevant purposes and the legal basis for using this content is discussed in the section “Purposes and legal basis for processing personal data”. To present third party content, it is technically necessary to transmit your IP address to the relevant third party. We have no influence over how the respective third party uses your personal data. In the following, we will, however, provide an overview of all the third party services used on this website. If available, we will also provide the relevant link to the third party’s privacy statement so that you can read about how your personal data is processed and, if possible, object to such processing.
| External service | Privacy statement | Option to object |
| External code “jQuery” from the JavaScript-Framework, provided by the third party jQuery Foundation, | jquery.org | |
Links to other websites
Our website contains links to other websites. We have no influence over whether their operators will uphold the data protection provisions. Despite the careful monitoring of content, we bear no liability for content on external links. The operators of the linked websites are solely responsible for the content on these sites.
Applicant management system
Electronic processing of your personal data in the application process is performed by an external software service provider. If you submit an online application via our Career page or a job portal, we will then collect your name and your e-mail address. You can voluntarily upload further data such as your telephone number and additional files, e.g. CV, cover letter, testimonials, photographs, etc.
Your security
We protect your data from unauthorised access, loss, manipulation or disruption by using a range of technical and organisational measures. Our security measures are constantly updated to match technological developments. All communication between your end device and our service is always encrypted. This applies to the download of documents, information that we provide on our website and information that is provided to us via contact forms or application forms.
Retention period
The personal data that you have provided to us is automatically deleted as soon as the processing purposes have been met. In particular the following retention periods apply:
| Categories of stored data | Deletion deadline |
| Technical data and records to backup the website | 6 months |
| Web tracking data | At the time of web tracking, your IP address is anonymised by deleting the final octet. Throughout the rest of the analysis, no personal data is processed. |
| Content which you have provided via the contact or application forms. | The retention periods for this content depend on the type of information transmitted and their respective legal retention periods. If an application that we have received does not lead to the conclusion of a work contract, this data will be deleted automatically 6 months after the application process is complete. If you, within the remit of your data subject rights, request the data to be deleted at an earlier date, the data will be deleted immediately. |
| Content you submit to us in the context of an application process. | The storage periods for such content depend on the type of information transmitted and the statutory retention periods applicable in each case.
If a received application does not lead to the conclusion of an employment contract, the data will be automatically erased 6 months after ending of the application process. Should the process result in your appointment, we will transfer your applicant data to your personnel file. This is subject to the separate duties to provide information for employees (m/f/d). |
Data subject rights
You retain the right to be informed at any time of personal data that we have stored about you. Furthermore, in accordance with articles 16 to 20 of the GDPR, you have the right to amend incorrect data, the right to delete your personal data, the right to restrict the processing of your personal data and the right to data portability.
Right to revoke consent
You retain the right to revoke your consent at any time. The revocation has immediate effect for the future. The legality of any consent given to processing until the point of revocation remains unaffected.
Right to appeal
If you believe that the processing of your personal data is in violation of the GDPR, you have the right to appeal to a supervisory authority.
Provision of your personal data
Personal data concerns information about your identity. This includes details such as your name, address, telephone number or email address. It is not necessary to provide personal data in order to use the website’s content. In certain cases, however, we require your name and address, as well as other details, so that we can render the services that you have requested.
This applies, for example, to the use of our contact form, the transfer of any information, answers to individual questions or the use of our forms for online applications. We will inform you where this is necessary. Moreover, we only store and use data which is either voluntarily or automatically made available to us. If you use consultancy services, then generally only the data which is necessary to render the services will be required. If we need more information from you, this is to be provided voluntarily. The personal data provided by you will only be used for the purposes discussed.
Changes to the privacy policy
We reserve the right to amend the security and data protection measures at any time, in particular if this is required due to technical developments. In such cases, we will adjust our data protection information accordingly. Please ensure that you follow the current version of this privacy policy.
Questions, suggestions, appeals
If you have further questions on the data protection information and the processing of your personal data, you can contact our data protection officer directly by using the contact details above.
