deen

Privacy Policy

 

Dear Visitor,

Protecting your privacy is important to us! The following information is intended to inform you about how we handle your data, which are collected when you use our website.
 

  1. Controller
    1. Name and Address of the Controller
    2. Bernstein GmbH
      Europahafen Bremen, Speicher 1
      Konsul-Smidt-Str. 8j
      28217 Bremen
      Germany

      Telefon: +49 421 33961 0
      Fax: +49 421 33916 99
      E-Mail: hello@bernstein.de

    3. Name and Address of the Data Protection Officer
    4. Bertold Frick, lawyer
      Datenschutz-Metropol GmbH
      Baumwollbörse, Wachtstraße 17/24
      28195 Bremen
      Germany

      E-Mail: frick@trinity-metropol.de

  2. General
    1. Scope and Processing of Personal Data
    2. As a matter of principle, we collect and use our users’ personal data only to the extent necessary for providing a functional website and to the extent necessary for providing content and services. If this is not the case, personal data will only be regularly used with the consent of the user. Exceptions to this apply in cases in which obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by statutory regulations.

    3. Legal Basis for Processing
    4. To the extent that we obtain the consent of the data subject for the processing of personal data, article 6, paragraph 1, point (a), of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.

      When processing personal data is required in order to fulfill a contract that the data subject is party to, article 6, paragraph 1, point (b), of the GDPR shall serve as the legal basis. This also applies to processing that is required in order to carry out precontractual measures.

      To the extent that processing personal data is required to fulfill a legal obligation that our company is subject to, article 6, paragraph 1, point (c), of the GDPR shall serve as the legal basis.

      In the event that vital interests of the data subject or any other natural person would necessitate the processing of personal data, article 6, paragraph 1, point (d), of the GDPR shall serve as the legal basis.

      If processing is necessary to ensure the legitimate interests of our company or a third party and the interests, fundamental rights, and fundamental freedoms of the data subject do not outweigh this interest, then article 6, paragraph 1, point (f), of the GDPR shall serve as the legal basis for the processing. The legitimate interest of our company lies in carrying out our business activities.

    5. Routine Erasure and Blocking of Personal Data
    6. We only process and store the personal data of the data subject for as long as this is required to achieve the purpose of storing them. Additionally, data may be stored if this is provided for by the European or national legislature in EU regulations, laws, or other regulations to which the agent responsible for processing is subject. Once the purpose for the storage no longer applies or the storage period prescribed by the aforementioned regulations expires, the personal data shall be routinely blocked or deleted.

    7. Security of Your Data
    8. We utilize the widely used SSL (Secure Socket Layer) method during the site visit in conjunction with the highest level of encryption supported by your browser, respectively. In general, this means a 256-bit encryption. If your browser does not support a 256-bit encryption, we will instead use 128-bit v3 technology. You can see whether the individual pages of our website are encrypted during transfer by the graphic of the closed padlock or key icon in the lower status bar of your browser.

      We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulations, partial or total loss, destruction, or against unauthorized access by third parties. Our security measures are enhanced on an ongoing basis to reflect technological developments.

  3. Usage Data
    1. Log Files
      1. Description and Scope of Data Collection
      2. Every time the website is accessed, we or the site provider collect data and information through an automated system. These are stored in the server’s log files.

        The following data can be collected:

        • Information about the type and version of browser used
        • The user’s operating system
        • The Internet service provider of the user
        • The user’s IP address
        • The date and time the website was accessed
        • Websites through which the user’s system accessed our website (referrer)
        • Websites accessed by the user’s system through our website

      3. Legal Basis for Data Processing
      4. The legal basis for the temporary storage of log files is article 6, paragraph 1, point (f), of the GDPR.

      5. Purpose of Data Processing
      6. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.

        This information is stored in log files to guarantee the website’s functionality. In addition, we use the data to optimize our website and to ensure the security of our information technology systems. No evaluation of the data is made for marketing purposes in this context.

        For these purposes, our legitimate interest also lies in the processing of data according to article 6, paragraph 1, point (f), of the GDPR.

        The data will be deleted as soon as they are no longer required for achieving the purpose for which they were collected. In the case of collecting data for the provision of the website, this is the case once the respective session has ended.

      7. Duration of Storage
      8. If data is stored in log files, this is done after a maximum of seven days. Storage beyond this is possible. In this case, the IP addresses of users are deleted or modified so that associating it to the client who made the request is no longer possible.

      9. Possibility to Object and Delete
      10. The collection of the data for the provision of the website and the storage of the data in log files is required for the operation of the website. Consequently, there is no possibility for the user to appeal this.

    2. Cookies
    3. So-called cookies are used on our website. Cookies are small text files that are stored in the cache of your Internet browser for the duration of your browser session (so-called session cookies) or for a defined duration (so-called permanent cookies) on your hard drive. The cookies enable your Internet browser to be recognized so that faster and more targeted content that is tailored to your needs and desires can be provided to you during future visits to our website. Thus, we use cookies in order to be able to offer our legitimate interest in the provision of a website tailored to the wishes of the visitors. The cookies do not store any personal data.

      Currently, we use cookies from Google Universal Analytics in order to be able to track how many times a person visits our website and WPML (see details under Item) so that our website can automatically recognize which language the browser uses in order to automatically adjust the language of our website.

      How can I prevent cookies from being stored on my computer?
      You can change your browser’s settings so that the storage of cookies is only accepted if you agree. You can delete any cookies that are still present. However, deactivating cookies may limit the usability of our website. Information on how to disable cookies can be found through the following link.

    4. Google Universal Analytics
    5. This website uses Google Universal Analytics, a web analysis service by Google Inc. (hereinafter “Google”). Google Universal Analytics likewise uses cookies (see Section 3).

      The information generated by the cookie about your use of this website is generally transmitted to and saved on a Google server located in the United States. We use IP address anonymization on our website. With this, your IP address will be truncated by Google within Member States of the European Union or in other states that are party to the European Economic Area Agreement. Your complete IP address will be transmitted to and truncated on a Google server located in the United States only in exceptional cases. Google is committed to complying with the Privacy Shield agreement published by the US Department of Commerce between the EU and the US regarding the collection, use, and storage of personal information from EU Member States and keeps a Privacy Shield certificate, accordingly.

      Google uses this information on our behalf to evaluate your use of the website, to compile reports about website activities, and to provide additional services to the operator of the website that are related to your use of the website and your Internet usage. The data transmitted can be used to create user profiles of the visitors to our website. The IP address transmitted by your browser in the scope of Google Universal Analytics will not be combined with other data from Google.

      The evaluation of user behavior on the website is based on the legitimate interests of the provider. Through the evaluation of the anonymized usage data, the website is adjusted and optimized based on user behavior.

      You can prevent cookies from being stored on your computer by adjusting your browser’s settings. Furthermore, you can prevent the data generated by the cookie and related to your use of the website from being collected and sent to Google and prevent Google from processing the data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de,

      You can also prevent usage and processing by clicking the following link. This will activate an opt-out cookie that will prevent future collection of your data when you visit this website: Disable Google Universal Analytics for this site.

      The information obtained from the cookie about the usage of this website is not forwarded to third parties.

      More information about the terms of use and the Google Universal Analytics privacy policy can be found at https://www.google.com/analytics/terms/us.html or at https://policies.google.com/?hl=us.

    6. Newsletter
    7. On our website you have the option of subscribing to our newsletter. For this, we require your name as well as your e-mail address in order to send you the newsletter.

      The legal basis for this is the consent (article 6, paragraph 1, sentence 1, point (a), of the GDPR). When registering for the newsletter, you agree that we may send a newsletter to your e-mail address. During the registration, you agree to the following consent text:

      “I hereby agree that [name] will send me e-mails to the e-mail address specified by me for the purpose of […]. I have the right to withdraw this consent at any time with effect for the future. I have read the privacy policy with further information regarding data processing.”

      You can withdraw this consent at any time for the future by unsubscribing from the newsletter. There is a link at the end of each newsletter sent that you can click in order to unsubscribe from the newsletter. Your entry will then be automatically deleted.

      Registering for our newsletter is done via a so-called double-opt-in procedure. This means that you will receive an e-mail after registering that requests confirmation of your registration. As proof of your registration for the newsletter, your registration and confirmation times as well as your IP address are stored.

      The statistical survey, analysis, and logging of the registration procedure is based on a legitimate interest (article 6, paragraph 1, sentence 1, point (f), of the GDPR). Here, the legitimate interest lies in the proper and technically perfect execution of sending an e-mail.

      We store your e-mail address, which you have provided in the context of requesting the newsletter, only as long as you have subscribed to the newsletter. As soon as you unsubscribe from the newsletter, we will delete your e-mail address.

      The newsletter is distributed via MailChimp, a newsletter distribution platform by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, United States.

      The e-mail addresses of our newsletter recipients, as well as their further information described in the scope of this notification, are stored on the servers of MailChimp in the United States. MailChimp uses this information to send and evaluate the newsletters on our behalf. In addition, according to its own information, MailChimp may use these data to optimize or improve its own services, for example, for technically optimizing the dispatch and the presentation of the newsletter, or for economic purposes in order to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them itself nor does it pass them on to third parties.

      We put our trust in the reliability as well as the IT and data security of MailChimp. MailChimp is certified under the US-EU Privacy Shield data protection agreement and is committed to complying with EU data protection requirements. In addition, we have concluded a data processing agreement with MailChimp. This is a contract in which MailChimp pledges to protect the data of our users; to process them on our behalf in accordance with its privacy policy; and in particular, not to disclose them to third parties. MailChimp’s privacy policy can be found
      here.

      Furthermore, we do not forward the e-mail address you submitted to us to third parties.

    8. Linking to Our Social Media Accounts, Facebook Insights
    9. On various places on our website, we have included links to our social media accounts. However, no data are transmitted to the respective operator of the pages and no personal data are processed in any other way.

      To increase the protection of your data, the plug-ins are not unrestricted, but rather are only integrated into the page by using an HTML link (the so-called Shariff solution from c’t). This integration ensures that when you visit the page that contains these plug-ins, no connection is established with the servers of the provider of the respective social network. Clicking one of the buttons opens a new browser window and opens the page of the respective service provider where, for example, you can (potentially after entering your log-in data) press the ‘Like’ or ‘Share’ button. For the purpose and scope of the data collection and the further processing and usage of the data by the providers on their sites and their rights in this regard, as well as the configuration options for protecting your privacy, please see the privacy policy of the providers.

      Currently this concerns an integrated link to our social media pages on Facebook, Instagram, E3 Network, LinkedIn, Xing, and Kununu. By integrating the links, we want to enable visitors to our website to stay in contact with us through social media. In addition, we incorporate the most recent photo with the appropriate text from our Facebook page into the home page of our website to draw attention to Bernstein GmbH.

      Facebook’s privacy policy can be found at https://www.facebook.com/policy.php.

      Instagram’s privacy policy can be found at https://help.instagram.com/15583370790000388.

      E3 Network’s privacy policy can be found at www.e3network.com/privacy/.

      LinkedIn’s privacy policy can be found at https://www.linkedin.com/legal/privacy-policy.

      Xing’s privacy policy can be found at https://privacy.xing.com/en/privacy-policy.

      Kununu’s privacy policy can be found at https://privacy.xing.com/en/privacy-policy.

      Use of Facebook Page Insights

      Facebook uses its “Page Insights” service on our website. Insofar as you have given your consent for tracking on our website by opting in to the service, your data will be recorded for our Facebook page. You may assert your rights as a data subject vis-à-vis Facebook Ireland and Bernstein GmbH. Pursuant to the GDPR, primary responsibility for the processing of Insights Data lies with Facebook. Facebook fulfills all obligations arising from the GDPR in respect of the processing of Insights Data and makes the essence of the Page Insights Addendum available to data subjects. Bernstein GmbH takes no decisions about the processing of Insights Data and other information arising from Article 13 of the GDPR, including the legal basis, the identity of the data controller, and the length of time for which cookies are stored on terminal devices.

      More information on the Page Insights Addendum and the responsibilities of Facebook can be found via this link.

    10. Usage of Google Maps
    11. We use Google Maps to show you interactive maps from Google Maps to provide you with a better experience on our website. Our legitimate interest also lies in this.

      You have a right to object to the creation of these user profiles. To do so, you need to contact Google.

      Google has submitted to and certified the Privacy Shield agreement between the European Union and the United States. As a result, Google is obligated to comply with the standards and regulations of European data protection law. More information can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

      For more information on the purpose and scope of the data collection and the processing thereof by the plug-in provider, please see the provider’s privacy policy. There, you will also find additional information about your rights and configuration options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy.

    12. Usage of Google Fonts
    13. External fonts, Google Fonts, are used on these websites. Google Fonts is a service of Google Inc. (“Google”). The integration of these web fonts is done by accessing a server, generally a Google server in the United States. Through this, which of our websites you visited will be transmitted to the server. The IP address of the browser of the terminal of the visitor of this website is also stored by Google. More information can be found in the privacy policies of Google, which are available at www.google.com/fonts#AboutPlace:about and at www.google.com/policies/privacy/.

    14. Usage of YouTube
    15. We use YouTube to be able to display and offer you content and features of the YouTube social platform on our website, thereby improving our offering and the user experience and making it more interesting.
      Our legitimate interest also lies in the processing of the above information.
      If you would like to prevent the transfer of data, then you cannot use the features of YouTube. Regardless of this, we recommend you regularly log off social networks after using them – in particular, however, before activating content that has been incorporated on other websites, as this will prevent your profile with the respective provider from becoming associated with you.
      Google has submitted to and certified the Privacy Shield agreement between the European Union and the United States. As a result, Google is obligated to comply with the standards and regulations of European data protection law. More information can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

      More information about Google’s privacy policy and usage of data can be found on the following Google website: https://policies.google.com/privacy?hl=en&gl=us

    16. Usage of Google AdWords
    17. In order to evaluate and optimize our online advertising, we use so-called conversion tracking as part of the online Google AdWords advertising program. This helps us recognize whether and how many people are visiting our pages through Google advertising. If you click a Google ad, Google places a so-called conversion cookie on your computer. This has a “life span” of 30 days. If a user visits one of our sites within these 30 days by one of our Google ads, we and Google will be able to recognize the ad that resulted in the visitor visiting our website. Personal data through which individual visitors can be identified are not collected. We only receive a statistical analysis of the total number of users who clicked on our ads and were led to our website.

      More information about Google conversion tracking can be found at https://support.google.com/adwords/answer/1722022?hl=de.

      You can opt out of the usage of conversion cookies and thereby prevent conversion tracking by:

  4. Your Personal Data (Master Data)
    1. What are personal data?
    2. Personal data are information about you as an individual that allows conclusions to be drawn about your identity or that relate directly or indirectly to you as an individual, for example, your name, address, or telephone number. Information that does not allow conclusions to be drawn about a particular or identifiable person is excluded.

    3. Usage of the Contact Form
    4. A contact form is available on our website, https://bernstein.de/en/connect/, which can be used for electronic contact. In order to use the contact form, you are obligated to enter your name, your e-mail address, and your message so that we can process and answer your inquiry accordingly. Optionally, you can also enter the name of your company and your telephone number. The provision of a contact form will serve our legitimate interests since it gives us more opportunities to get in touch with you. If you voluntarily use the option of providing your company name and your telephone number, you thereby consent to us collecting and using the data in order to contact you. Alternatively, you can also contact us via the e-mail address provided, hello@bernstein.de, by clicking the “Send e-mail” button, which opens your e-mail program and inputs our e-mail address in the recipient field, or by telephone. If the data subject contacts the person who is responsible for the processing using one of these channels, then the personal data transmitted by the data subject will be automatically stored. The storage is solely used for the purposes of processing the data or contacting the data subject. The data are not forwarded to third parties. The data you submit will only be stored for as long as is required for establishing contact.

    5. Job Applications with Bernstein GmbH
    6. You can access the currently advertised job openings of Bernstein GmbH online at https://bernstein.de/en/jobs/. Click the link indicated on the website in order to send an e-mail to us via your e-mail program. You can send your application documents as an attachment by e-mail. It is also possible to send applications to Bernstein GmbH by regular mail or e-mail (e-mail address: jobs@bernstein.de). Providing these e-mail addresses for applications serves our legitimate interests by creating another way to submit applications and address a wider range of potential applicants. Alternatively, you can also submit your application to us via regular mail. The data collected is stored solely for the purposes of carrying out the application process. The storage lasts no more than six months as of the end of the application process. Unsolicited applications sent electronically (via e-mail) are regularly deleted immediately upon receipt. However, we reserve the right to save application documents for up to 12 months in order to potentially establish contact if our legitimate interests indicate that a position for the specific application may come into consideration within this period. By sending the unsolicited application, you also declare your consent to this storage. You are entitled to withdraw your consent to the storage at any time by sending an e-mail to hello@bernstein.de. Applications sent by regular mail to Bernstein GmbH will be sent back to the applicants at the end of the application process.

    7. Redirecting to Other Websites
    8. In order to increase our service offering, you can find links on our website to other websites, which other providers are responsible for. The extent to which our advertising partners collect personal data can be found in their privacy policies. You can recognize that you are being redirected due to the fact that a new browser window opens and a new address is displayed in the browser line.

    9. Disclosure of Data to Third Parties
    10. We only disclose your personal information to third parties if

      • you have given your express consent to this, pursuant to article 6, paragraph 1, sentence 1, point (a), of the GDPR
      • the disclosure is required, pursuant to article 6, paragraph 1, sentence 1, point (f), of the GDPR in order to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of being protected for not disclosing your data
      • there is a legal obligation to transfer them, pursuant to article 6, paragraph 1, sentence 1, point (c), of the GDPR

      No data will be transferred to third parties for purposes of advertising.

    11. Processing of Data Outside the European Economic Area (EEA)
    12. The usage of our website involves transferring data (including transferring data to the United States and other countries outside the EEA). Bernstein GmbH is entitled to process personal data in or transfer personal data to countries outside the EEA (including countries upon which the European Commission has not made a decision regarding the adequate protection of personal data) and, in particular, to the United States. The transfer of such data will comply with the local legislation regarding cross-border data transfer, where applicable. If you do not agree with this process, you may not use our services. By using our services, you consent to the transfer of your information to countries outside your own country and outside the EEA for the business purposes outlined above.

  5. Rights of the Data Subject
  6. You have the right:

    • pursuant to article 15 of the GDPR, to request information about your personal data processed by us. In particular, you can request information on the purposes of the processing; the category of personal data; the categories of recipients to whom your data has been or will be disclosed; the planned duration of the storage; the existence of a right to rectification, erasure, limitation of processing, or objection; the existence of a right of appeal, where your data originated if they were not collected by us; and the existence of an automated decision-making process – including profiling – pursuant to article 22, paragraphs 1 and 4, of the GDPR and, if applicable, meaningful information regarding the details thereof. You have the right to request information about whether the personal data concerning you are transmitted to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to article 46 of the GDPR in connection with the transfer.
    • pursuant to article 16 of the GDPR, to immediately demand that any incorrect or incomplete personal data stored by us be rectified immediately.
    • pursuant to article 17 of the GDPR, to demand the erasure of your personal data stored by us, except where the processing is for the exercise of the right to freedom of expression and information; for the fulfillment of a legal obligation; for reasons of public interest; for the assertion, exercise, or defense of legal claims; for archival, scientific, or historical research purposes in the public interest or as is necessary for statistical purposes according to article 89, paragraph 1, of the GDPR, provided that the right indicated is likely to make the fulfillment of the objectives of that processing impossible or severely affect them.
    • pursuant to article 18 of the GDPR, to demand the limitation of the processing of your personal data to the extent that the accuracy of the data is disputed by you; the processing is unlawful, yet you decline the deletion thereof, and we no longer require the data, yet you require this for the assertion, exercise, or defense of legal claims; or you have objected to the processing in accordance with article 21 of the GDPR. If the processing of personal data concerning you has been limited, these data may only be processed with your consent or in order to assert, exercise, or defend against legal claims; to protect the rights of another natural or legal person; or for reasons of significant public interest of the Union or of a Member State and you will be informed by the responsible agent before the limitation is removed.
    • pursuant to article 20 of the GDPR, to receive your personal data, which you have provided to us, in a structured, established, and machine-readable format, or to request the transfer thereof to another responsible agent, provided that the freedoms and rights of others are not adversely affected by this. This right of data portability does not apply to the processing of personal data that are required for the performance of a task in the public interest or in the exercise of official authority that has been delegated to the responsible agent.
    • pursuant to article 7, paragraph 3, of the GDPR, to withdraw your consent, granted once to us, at any time. As a result, we are no longer permitted to continue the data processing based on this consent for the future.
    • pursuant to article 22 of the GDPR, to not be subjected to a decision based exclusively on automated processing – including profiling – that will have a legal effect or significantly adversely affect you in a similar manner as long as the decision is not required for the conclusion or performance of a contract between you and us due to the legislation of the Union or of the Member States, to which the responsible agent is subject, is permissible, and this legislation contains reasonable measures to safeguard your rights and freedoms as well as your legitimate interests and in accordance with your express consent. These decisions may not be based on special categories of personal data pursuant to article 9, paragraph 1, of the GDPR, unless article 9, paragraph 2, points (a) or (g) apply, and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
    • pursuant to article 77 of the GDPR, to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence, workplace, or our headquarters for this. The supervisory authority with which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to article 78 of the GDPR.

  7. Right to Object
  8. If your personal data are processed on the basis of legitimate interests in accordance with article 6, paragraph 1, sentence 1, point (f), of the GDPR, you have the right to submit an objection against the processing of your personal data in accordance with article 21 of the GDPR, provided that there are reasons for this that result from your particular situation, or the objection is targeted towards direct mail. In the latter case, you have a general right of objection, which shall be implemented by us without specifying any particular situation.

    If you would like to exercise your right of revocation or objection, sending an e-mail to hello@bernstein.de is sufficient.

  9. Validity and Amendments to this Privacy Policy
  10. This privacy policy is currently valid and was last updated in May 2018.

    As a result of the further development of our website and offers that are made through the website or because of changing legal or official requirements, it may be necessary to modify this privacy policy. The current privacy policy can be viewed at any time on the website at https://bernstein.de/en/privacy/.