Website Privacy Policy
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. It is generally possible to use our website without providing any personal data. Where personal data (such as your name, address or email address) is collected on our website, this is always done on a voluntary basis wherever possible. This data will not be passed on to third parties without your express consent. Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.
Data Controller
Poolarserver GmbH
Heilbronner Straße 74
70191 Stuttgart
Managing Directors Dr Hanno Treiber, Tobias Skarman, Güven Kantemir
Contact:
Telephone: +49 711 40046300
Fax: +49 711 40046399
Email: office@poolar.com
Data Protection Officer
Ms Natalie Dittrich
Dr Bechtold Datenschutz & Compliance GmbH
Grünhutstraße 6
76187 Karlsruhe
datenschutz@poolar.com
Telephone 0711 400 463 00
Your Rights
In connection with any processing of your personal data, you have the following rights:
- to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
- in accordance with Article 16 of the GDPR, to request without delay the rectification of inaccurate personal data or the completion of your personal data held by us;
- to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- to request the restriction of the processing of your personal data in accordance with Article 18 of the GDPR, where you contest the accuracy of the data, the processing is unlawful but you object to its erasure, and we no longer require the data but you need it to assert, exercise or defend legal claims, or you have objected to the processing in accordance with Article 21 of the GDPR;
- in accordance with Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller;
- in accordance with Article 7(3) of the GDPR, to withdraw your consent at any time. As a result, we will no longer be permitted to continue processing data on the basis of that consent in future, and
- to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you may contact the supervisory authority for your usual place of residence or work, or for our registered office (State Commissioner for Data Protection and Information Security in Baden-Württemberg).
Right to Object
Where your personal data is processed on the basis of legitimate interests in accordance with Article 6(1), first sentence, point (f) of the GDPR, you have the right, in accordance with Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which we will honour without you needing to specify a particular situation.
If you wish to exercise your right of withdrawal or right to object, simply send an email to datenschutz@poolar.com or to Dr Hanno Treiber, Heilbronner Straße 74, 70191 Stuttgart.
Website
1. Cookies
Some of the web pages on this site use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit. You can configure your browser so that you are notified when cookies are set and can choose to allow cookies only on a case-by-case basis, block the acceptance of cookies in specific cases or generally, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.
2. Server Log Files
The website provider automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- operating system used
- Referrer URL
- Hostname of the connecting computer
- Time of the server request
This data cannot be linked to specific individuals. This data is not combined with other data sources. We reserve the right to review this data at a later date should we become aware of specific evidence of unlawful use.
3. Tracking & Analysis
(a) Google Services
Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server in the USA and stored there.
By default, we process your personal data in an anonymised manner in accordance with Article 6(1), first sentence, point (f) of the GDPR. With your consent via the cookie prompt, we also process your personal data in a manner that is not entirely anonymised in accordance with Article 6(1), first sentence, point (a) of the GDPR.
It cannot be ruled out that data may be transferred to the USA. Google LLC is a company based in the USA. An adequate level of data protection is ensured by the EU–US Data Privacy Framework or – where necessary – by Standard Contractual Clauses (SCCs).
For more information on how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de
Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager is used to manage website tags via a single interface. The tool itself (which implements the tags) does not collect any personal data from website visitors; however, data from other services is triggered and managed there.
The legal basis for the processing of your personal data by Google Tag Manager is your consent in accordance with Article 6(1)(a) of the GDPR, which you can give via our consent management tool.
It cannot be ruled out that data may be transferred to the USA. Google LLC is a company based in the USA. An adequate level of data protection is ensured by the EU–US Data Privacy Framework or – where necessary – by Standard Contractual Clauses (SCCs).
Google Ads
We use Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to display personalised or non-personalised adverts to users, to analyse visits to the website and to compile statistics on these visits.
The following data is processed: adverts viewed, cookie ID, date and time of the visit, device information, geographical location, IP address, search terms, impressions, online identifiers, browser information, referrer URL, interaction data.
These cookies enable Google to recognise the web browser you are using. If a user visits certain pages on our website and the cookie stored on their computer has not yet expired, Google and we, as an Ads client, can recognise that the user has clicked on one of our adverts and was subsequently redirected to our site. Each Ads client is assigned its own cookie, meaning that traceability cannot occur across the websites of different Ads clients.
We do not collect or process any personal data ourselves as part of these advertising activities. We merely receive statistical reports from Google, which enable us to identify which of our advertising measures are particularly effective. We do not receive any further data resulting from the use of these advertising materials; in particular, we cannot identify users on the basis of this information.
The marketing tools used cause your browser to automatically establish a direct connection to Google’s server. We have no control over the scope or further use of the data that Google collects through the use of this tool. To the best of our current knowledge, the following applies: Through the integration of Ads Conversion, Google receives information that you have accessed the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google may record and store your IP address.
We use the remarketing feature within the Google Ads service. This feature enables us to show interest-based adverts to users of our website on web pages within the Google Display Network (in Google Search, on YouTube or on other websites). To do this, we analyse users’ behaviour on our website – for example, which offers a user found interesting – so that we can display targeted adverts to them on other sites even after they have visited our website.
To this end, Google stores cookies on the devices of users who visit certain Google services or websites on the Google Display Network. These cookies are used to track these users’ visits. The cookies are used to uniquely identify a web browser on a specific device, not to identify an individual.
The legal basis for the processing of your personal data is your consent in accordance with Article 6(1)(a) of the GDPR, which you can give via our consent management tool.
The maximum period for which cookies may be stored is 365 days.
It cannot be ruled out that data may be transferred to the USA or other third countries. Google LLC is a company based in the USA. An adequate level of data protection is ensured by the EU–US Data Privacy Framework or – where necessary – by Standard Contractual Clauses (SCCs).
Google Enhanced Conversions
This is a feature that can improve the accuracy of conversion tracking and enable more effective bidding. The service is used for conversion tracking, conversion optimisation and to ensure the security of measurement partners. In doing so, we process the following data: email address, first name (if applicable), surname, address, telephone number, login details for the subscription service, and purchase information.
The legal basis for the processing of your personal data is your consent in accordance with Article 6(1)(a) of the GDPR, which you can give via our consent management tool.
It cannot be ruled out that data may be transferred to the USA or other third countries. Google LLC is a company based in the USA. An adequate level of data protection is ensured by the EU–US Data Privacy Framework or – where necessary – by Standard Contractual Clauses (SCCs).
Google Web Fonts
This site uses so-called web fonts, provided by Google, to ensure consistent font display. When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly. If your browser does not support web fonts, a standard font from your computer will be used instead. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
Google Maps
This site uses the Google Maps mapping service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer. Further information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/
Note: Browser Plug-In
You can prevent cookies from being stored by adjusting the settings in your browser; however, please note that, in this case, you may not be able to make full use of all the features of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), as well as prevent Google from processing this data, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Using DearFlip in Conjunction With Google Analytics
On our website, we use the DearFlip plugin to provide interactive PDF views. DearFlip itself does not collect any personal data. However, interactions with this plugin, such as opening and scrolling through PDFs, are tracked by Google Analytics. This data helps us to analyse the use of this feature and to further improve our service.
Note: Objection to Data Collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set, which will prevent your data from being collected on future visits to this website: Disable Google Analytics.
Contract Data Processing
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
IP Anonymisation
We use the ‘IP anonymisation’ feature on this website. However, this means that your IP address is truncated by Google beforehand within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.
Demographic Characteristics in Google Analytics
This website uses the ‘demographic characteristics’ feature of Google Analytics. This enables reports to be generated that provide information on the age, gender and interests of website visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. This data cannot be linked to any specific individual. You can disable this feature at any time via the ad settings in your Google Account, or you can generally prevent Google Analytics from collecting your data as described in the section ‘Objecting to data collection’.
b) HubSpot
We use features provided by HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as ‘HubSpot’). This is an integrated software solution that enables us to manage various aspects of our online marketing. These include, amongst others: email marketing (newsletters and automated mailings, e.g. to provide downloads), social media publishing and reporting, reporting (in particular traffic sources, page views, etc.), contact management (in particular user segmentation and CRM), landing pages and contact forms. HubSpot places a cookie on your computer for this purpose. This may result in personal data being stored and analysed, primarily the user’s activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data on the advertisements displayed (in particular which advertisements were shown and whether the user clicked on them), and also data from advertising partners (in particular pseudonymised user IDs).
Further information on how HubSpot processes data can be found here:
https://legal.hubspot.com/de/privacy-policy
Depending on the nature of the use, as described under the relevant section in our Privacy Policy, we process any personal data on the basis of our legitimate interest in optimised marketing and sales pursuant to Article 6(1)( 1(f) of the GDPR and on the basis of your consent pursuant to Article 6(1)(a) of the GDPR. Where we analyse your user behaviour on a personalised basis, this is done only with your consent.
c) LinkedIn
LinkedIn Ads
On our website, we use the advertising service LinkedIn Ads, an offer provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. We use this service to improve the effectiveness of our advertising and to optimise our advertising activities.
The service uses cookies, web tags and pixels. In doing so, we process the following information: Advertisements viewed, advertising ID, articles viewed, device ID, device information, IP address, information about the operating system, pages visited, search terms, connections, followers, information provided on the profile, user agent data, videos viewed.
Data processing is carried out on the basis of your consent via the Consent Manager in accordance with Article 6(1), first sentence, point (a) of the GDPR.
Please note that your data will also be shared with LinkedIn; please familiarise yourself with their privacy policy: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh;=www.linkedin.com
It cannot be ruled out that data may be transferred to the USA or other third countries. LinkedIn is a company based outside the EU. An adequate level of data protection is ensured by appropriate safeguards (e.g. standard contractual clauses).
LinkedIn Insight Tag
In addition, we use the LinkedIn Insight Tag sub-service for analysis, retargeting and marketing. The service sets cookies and processes the following data: IP address, device information, browser information, timestamps, referrer URL.
Data processing is carried out on the basis of your consent via the Consent Manager in accordance with Article 6(1), first sentence, point (a) of the GDPR.
The data will be deleted after 90 days.
(d) Meta
Facebook Plugins (Like button)
Our website incorporates plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise the Facebook plugins by the Facebook logo or the ‘Like’ button on our website. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/. When you visit our website, the plugin establishes a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site using your IP address. If you click the Facebook ‘Like’ button whilst logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Facebook. Further information on this can be found in Facebook’s privacy policy at https://facebook.com/policy.php. If you do not wish Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
e) DearFlip Plugin
We use the DearFlip plugin to provide interactive PDF views on our website. When using DearFlip, no personal data is collected directly by the plugin. However, interactions with this plugin may be tracked by Google Analytics, as described in the relevant section of this privacy policy.
(f) Microsoft Advertising
The website operator uses Microsoft Advertising. Microsoft Advertising is an online advertising programme provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Advertising enables us to display adverts on the Bing search engine or on third-party websites when users enter specific search terms on Bing (keyword targeting). Furthermore, targeted adverts can be displayed based on user data held by Microsoft (e.g. location data and interests) (audience targeting). As website operators, we can analyse this data quantitatively, for example by examining which search terms led to our adverts being displayed and how many adverts resulted in clicks.
On this page, we use Microsoft Advertising’s Universal Event Tracking (UET). This involves the collection of pseudonymised data to track the actions you take on our websites after clicking on an advert on Microsoft Advertising. In doing so, UET collects your IP address (anonymised), device identifiers, information about device and browser settings, the Microsoft Click ID (stored in a cookie), the time spent on the website, which sections of the website were visited, the advert through which you arrived at the website, and the keyword clicked.
Use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Further details can be found here: https://learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses.
The company is certified under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the US designed to ensure compliance with European data protection standards when data is processed in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this is available from the provider via the following link: https://www.dataprivacyframework.gov/participant/6474.
Order Processing
We have entered into a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law, which ensures that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
(g) Cloudflare Turnstile
We use Cloudflare Turnstile (hereinafter ‘Turnstile’) on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter ‘Cloudflare’).
Turnstile is used to check whether data is being entered on this website (e.g. in a contact form) by a human or by an automated programme. To do this, Turnstile analyses the website visitor’s behaviour based on various characteristics.
This analysis begins automatically as soon as a website visitor enters a website where Turnstile is enabled. For the purposes of analysis, Turnstile evaluates various pieces of information (e.g. IP address, the length of time the website visitor spends on the site, or the user’s mouse movements). The data collected during the analysis is forwarded to Cloudflare.
The storage and analysis of the data are carried out on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web services from malicious automated surveillance and from spam. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data processing is based on standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/.
For further information on Cloudflare Turnstile, please refer to the privacy policy at https://www.cloudflare.com/cloudflare-customer-dpa/.
The company is certified under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the US designed to ensure compliance with European data protection standards when data is processed in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this is available from the provider via the following link: https://www.dataprivacyframework.gov/participant/5666.
4. SSL Encryption
This website uses SSL encryption for security reasons and to protect the transmission of confidential information, such as the enquiries you send to us as the website operator. You can recognise an encrypted connection by the fact that the address bar in your browser changes from ‘http://’ to ‘https://’ and by the padlock icon in your browser bar. When SSL encryption is enabled, the data you send to us cannot be read by third parties.
5. Registration on This Website
You can register on our website to access additional features on the site. We use the data you provide for this purpose solely for the purpose of using the specific offer or service for which you have registered. In the event of important changes, such as to the scope of our services or technically necessary changes, we will use the email address you provided during registration to inform you of these changes.
6. Contact Form
If you use our contact form, the details provided in the enquiry form will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions; under no circumstances will they be passed on to third parties. Please feel free to ask us about the data processors we use. By completing and submitting the contact form to us, you expressly consent to the data processing described above. The consent you have given to the storage and use of your personal data and files may be withdrawn at any time with future effect.
Processing of Data (Customer and Contract Data)
We collect, process and use personal data only to the extent that it is necessary for the establishment, substance or amendment of the legal relationship (master data). We collect, process and use personal data relating to the use of our website (usage data) only to the extent necessary to enable the user to access the service or to bill them for it.
Applications
Thank you very much for your interest in applying online to our company. Poolar attaches great importance to the protection of your personal data. We are therefore providing you with information on our compliance with data protection regulations to ensure that the application process takes place in a spirit of trust. Please read the following information and terms carefully before submitting your details to us.
Data Collection
If you wish to submit an online application, you will be required to provide certain personal data, which is marked as a required field on the application form. You also have the option to submit additional application documents. The application form and any uploaded data will only be submitted once you have ticked the box to confirm that you consent to the collection, storage and use of your personal data in accordance with data protection regulations.
Storage, Use and Deletion of Data
The data and files you submit will be stored and used solely for the purposes of recording and processing your online application. Your application will be forwarded to the relevant department and to senior management. Following the successful completion of the application process, your data and files may continue to be used in the context of the resulting employment relationship. Should we be unable to offer you a position, we will retain the data you have submitted for up to six months for the purpose of answering any queries relating to your application and the decision not to offer you a position. If your application documents are of general interest to us but there are currently no suitable vacancies available, you hereby give us your consent to retain and store your data accordingly. This will enable us to contact you regarding future job vacancies.
Disclosure of Data to Third Parties
Your online application will be processed and reviewed exclusively by the relevant members of staff within our organisation. All staff members entrusted with data processing are obliged to maintain the confidentiality of your data. Under no circumstances will third parties have access to your details. Data processing takes place exclusively in Germany.
Newsletter Privacy Policy
You will only receive our poolarNEWS newsletter if you have given your express consent. The easiest way to subscribe is via the ‘Newsletter’ menu item on your Poolarserver. We process your email address for the purpose of sending the newsletter. Providing your name is optional and is used solely to address you personally in the newsletter.
Provided you have given your explicit consent in accordance with Article 6(1), first sentence, point (a) of the GDPR, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, you simply need to provide an email address. As part of the newsletter, we carry out tracking (opens, clicks, unsubscriptions, bounces, campaign tracking, geographical data, device types) on the basis of our legitimate interest in improving the information in our newsletter.
Furthermore, if you have given your consent via the Consent Manager on our website, we will continue to track your usage behaviour on a personal basis and identify you as a newsletter recipient. Please note that this can only take place with your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR via the Consent Manager on our website.
You can unsubscribe from the newsletter at any time, for example via a link at the bottom of each newsletter. Alternatively, you are welcome to email newsletter@poolar.com at any time to request that you be removed from the mailing list.
The link provided as part of the double opt-in process is valid for 30 days; we will retain your email address for this period even if you do not complete the registration process. Furthermore, we will retain your email address for the newsletter for 3 years should you no longer wish to receive it.
Questions and Suggestions Regarding Data Protection
If you have any questions regarding the collection, processing or use of your personal data, or any suggestions regarding data protection, please send an email to datenschutz@poolar.com.