Data protection

You can visit our website without providing any personal information. During your visit, we store the following access data in so-called server log files without your intervention:

• IP address of the requesting computer
• Website from which the access was made (referrer URL)
• Browser type and version as well as other information transmitted by the browser (such as the operating system of your computer)

According to Art. 6 (1) lit. f. DS-GVO (legitimate interest), this data processing is carried out to ensure the trouble-free operation of the pages, e.g. to guarantee a smooth connection setup of the website, to evaluate the system security and stability, to detect and prevent attacks on our website, and others.
The information is stored in the log files for a period of 7 days and then deleted, unless further storage is necessary for the purpose of preserving evidence until final clarification.

The provision of our website, maintenance, adaptations and servicing is ensured via a service provider who accordingly processes your data on our behalf (order processing in accordance with Art. 28 DS-GVO). If further service providers are involved or data is transferred to third parties in other ways, you will find this listed separately in the corresponding §.

Our site offers you a function with contact forms, when using which personal data is collected, processed and stored by us. In the following, we explain what happens with this data: The data recorded via our contact forms (mandatory data: surname, first name, e-mail, telephone number, request) are used (within the scope of your consent, for contract performance, due to legitimate interest – Art. 6 para. 1 lit. a, b and f) DSGVO) only for the processing of requests received through the forms. Further information in the contact form (company, position) on your part is voluntary. In order to process your inquiry, we record your contact data in our CRM and also contact you by mail if we believe we have an offer that is of interest to you. The legal basis is our legitimate interest in establishing contacts in a B2B environment and using contact data received in connection with the contact forms for this purpose (Art. 6 para. 1 lit. f) DSGVO). We store the personal data collected via our contact form for the duration of the conducted communication and processing of your request. If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. Should further communication result from contacting us, e.g. an offer or order, the data processing including the storage period is based on the procedures specified there. Furthermore, there are storage obligations in accordance with § 257 of the German Commercial Code (HGB) in the context of the conclusion of a contract.

Newsletter

Furthermore, there is the possibility that you subscribe to our newsletter. With this newsletter we inform you about our company, our products and services. If you would like to receive the newsletter, we process according to your consent (Art. 6 para. 1 lit a) DSGVO) your e-mail address, title and last name (mandatory information). Further details (company, title, first name) are voluntary. Furthermore, for reasons of proof (Art. 6 para. 1 lt. F) DSGVO), we store the IP address and time of registration and confirmation of this registration.

Your details will be stored in our CRM system. They are only used for sending the newsletter. For this purpose, your data is transmitted to servers of the company CleverReach. The servers are located in Germany and Ireland. You can find more information about this at www.cleverreach.de/security. You can unsubscribe from the newsletter at any time via a link in the newsletter tool. With your objection, your data will be deleted immediately, unless you have deposited them with us in another context (e.g. for application) and they may be subject to legal retention obligations.

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link data and the web beacons with your e-mail address and an individual ID. The data mentioned in the previous sentence includes the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the amount of data transferred in each case; the website from which the request came, the browser; the operating system and its interface and the language and version of the browser software. Links received in the newsletter also contain this ID.

Blog

You have the option of commenting on our articles in our blog. The data stored there will only be used in the context of publishing the comment. Since we, as the operator of the website, are responsible for the content, we store the IP address when a comment is left on the basis of our legitimate interests (Art. 6 para. 1 DSGVO) in order to trace any comments that may contain insults, polemics, racist or similar unlawful content. The comments themselves are published and stored until revoked. You can object to this data processing and the publication of your comment at any time by sending us an email to: info@oraylis.de.

Registration for events (face-to-face events, webinars, strategy talks, etc.)

If you register for an event via our website, we will process your data (mandatory data: first name, last name, company, e-mail address) in accordance with your consent (Art. 6 para. 1 lit. a) DSGVO in order to ensure your participation in the event, e.g. inclusion in the list of participants, sending of the booking confirmation, etc. If we hold the events in cooperation with another company or with the support of a service provider (e.g. event hotel, software provider of a webinar tool, …), the data you entered will be passed on to the cooperation partner or service provider so that they can process your data for the purpose of holding the event. The subject of the contract with our cooperation partners or service providers is also a data protection compliant handling of personal data, so that the security of your data is our top priority. Please note that some events are not carried out by us, but you then enter your data directly on the site of the respective cooperation partner. In this case, you can obtain information relevant to data protection in the privacy policy of the respective cooperation partner or service provider.

We use the GoToWebinar software of the provider LogMeIn Ireland Limited to conduct webinars. In the course of registration on the infrastructure of the company LogMeIn (Bloodstone Building Block C70 Sir John Rogerson’s Quay Dublin 2, Ireland), personal data is collected/stored. In particular, this involves the surname, first name, company, telephone number and e-mail address. The legal basis for the data processing is the fulfillment of the contract pursuant to Art. 6 Abs. 1 lit. b) DSGVO for the implementation of the webinar. We have concluded an order processing agreement with the company LogMeln Ireland Limited in accordance with Art. 28 DSGVO. The data is processed in Germany, the European Union and the USA to the extent permitted by law. For data processing in the USA, an appropriate level of protection has been established by agreeing the EU standard contractual clauses. In this context, please also note the data protection regulations of the company LogMeIn: https://www.logmeininc.com/de/gdpr/gdpr-compliance.

To promote our events and webinars and to implement the registration form, we use Mobile Funnel (hereinafter: Funnel). Detailed information about this provider and how it works can be found in the section below on the use of Mobile Funnel. As an alternative to Mobile Funnel, you can also register for the webinars on our website via a contact form or via LinkedIn. If you enter your data via the Funnel and register for events, or alternatively use our contact form or register via LinkedIn, we will include your contact details in our CRM and contact you by mail if we believe we have an offer of interest to you. The legal basis for this is our legitimate interest in establishing contacts in a B2B environment and using contact data that we have received in connection with our events for this purpose (Art. 6 para. 1 lit. f) DSGVO). If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. If further communication results from the contact, e.g. an offer, job interview or commissioning, the data processing including the storage period is based on the procedure specified there.

Download of the career magazine

When you request our career magazine, we need your first name and e-mail address. We use this information to send you a link to the magazine in accordance with your consent (legal basis: Art. 6 para. 1 lit. a) DSGVO). Furthermore, we use your data to track whether you have already been in contact with us when applying for a vacancy or to contact you when a suitable vacancy arises. The legal basis for this is our legitimate interest (Art. 6 para. 1 lit. f) DSGVO) in establishing and maintaining contacts in a B2B environment. If there are no legal retention periods, your data will be deleted once the purpose has been fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de . If further communication should result from the establishment of contact, e.g. an application procedure, the data processing including the storage period is based on the procedures specified there.

Download our whitepapers

For the implementation of the download and for the promotion of our whitepapers we use perspective Mobile Funnel (hereinafter: Funnel). You can find detailed information about this provider and how it works in the section below on the use of Mobile Funnel. As an alternative to Mobile Funnel, you can also request our whitepapers on our website via a contact form or via LinkedIn. If you enter your data via the Funnel or use our contact form or LinkedIn and download our whitepaper, we will record your contact data (mandatory information: first name, last name, company, position, email address) in our CRM and contact you by mail if we think we have an offer that might be of interest to you. The legal basis is our legitimate interest in establishing contacts in a B2B environment and using contact data that we have received in connection with the download for this purpose (Art. 6 para. 1 lit. f) DSGVO). If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. If further communication results from the contact, e.g. an offer or order, the data processing, including the storage period, is based on the procedures specified there.

Use of Mobile Funnel

We use mobile funnels (hereinafter: funnels) to advertise our offers such as job vacancies, white papers, webinars, events, and to implement forms. Among other things, we use ads on social media or social media posts to draw attention to these offers. The processing of your data through the forms in the Funnel for the purpose of sending you the information you requested is based on your consent (Art. 6 para. 1 lit. a) DSGVO).

Furthermore, we record your contact data (mandatory data: first name, last name, company, position, e-mail address) in our CRM and contact you by mail if we believe that we have an offer of interest to you. The legal basis is our legitimate interest in establishing contacts in a B2B environment and using contact data that we have received in connection with the download for this purpose (Art. 6 para. 1 lit. f) DSGVO). If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. If further communication results from the contact, e.g. an offer or order, the data processing including the storage period is based on the procedure specified there.

The software for creating Mobile Funnel is provided by Perspective Software GmbH, a company based in Germany. There is an agreement with Perspective on commissioned processing pursuant to Art. 28 (3) DSGVO. The data entered as part of the use of Mobile Funnel is transmitted via SSL encryption and stored in a database. In addition to the data you collect for your registration, general log data, so-called server logs, are collected with each access to the Funnel. These data are usually pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. Without this data, it would not be technically possible in part to deliver and display the contents of the software. In addition, the processing of this data is mandatory for security reasons, in particular for access, input and transfer and storage control. Furthermore, the anonymous information can be used for statistical purposes as well as for the optimization of the offer and the technology. In addition, the log files can be subsequently controlled and evaluated in the event of suspicion of illegal use of the software.

The legal basis for this is found in Art. 6 para. 1 lit. f) DSGVO and § 25 para. 2 No. 2 TTDSG. Data such as the domain name of the website, the web browser and web browser version, the operating system and the timestamp of access to the software are generally collected. The IP address of the user is not stored. However, the user is assigned a so-called session ID. The storage period of these access logs is up to 7 days. All data entered by the user when using the Funnel (e.g. answering form fields; using interactive components) are assigned to the user by means of a session ID and made available to us.
So-called cookies are used in the Funnel. The cookies used are either absolutely necessary (ensuring security when visiting the website) or are used to implement certain functionalities such as default language settings or to improve the user experience or performance on the website. Through their use, default settings can be implemented, such as the language, storage of given answers even in case of poor internet connection or analysis of the performance of a funnel and the used channel through which a user has reached these funnels. The use of cookies is mandatory for the provision of our services and is therefore based on Art. 6 para. 1 lit. f) DSGVO and § 25 para. 2 No. 2 TTDSG. Storage period: Up to 1 month or until the end of the browser session. Please note that deactivating cookies may result in limited or completely disabled functionality of the Funnel. In addition, YouTube videos are sometimes embedded in our mobile funnels, which set cookies (storage period up to 18 months). Through the cookie banner used in the Funnel, you can decide whether you agree to this. Only if this is the case, you can watch the video.

Signature

We use mailtastic, a service provided by NETSTAG GmbH (NETSTAG GmbH, Große Bleiche 10, 55116 Mainz), to advertise our content in our signature. If you receive an e-mail from us and click on the banner contained in the signature, you will be redirected to a corresponding subpage of our website or to a perspective funnel (for more on perspective funnels, see the section above). When you click on the banner, NETSTAG collects the IP address that results from the call and anonymises it when it is written to the log file. This data processing gives us an overview of how often the individual banners in our signature have been called up and clicked on. This data processing serves our legitimate interest (Art. 6 para. 1 lit f.) DSGVO) to measure the success of the signature banner and to align our content with the interest of the users.

You can apply for open positions via our website or send us your speculative application. Please only use the application platform provided for this purpose. We can then guarantee that your application will only be processed by the appropriately authorised persons in our company.

For the automated processing of your application, we process the following data from you:

• First name, surname, e-mail and, if applicable, also address/city, date of birth, title, telephone number, citizenship, if applicable other data relevant to the position (e.g. driving licence).
• Data from your letter of motivation and CV, in particular information on professional experience and training, skills (e.g. Photoshop, MS Office), qualifications, awards and language skills
• Application photo, references, letters of recommendation, other documents that you upload, if applicable.
• We store written electronic communication that takes place between you and us. Furthermore, we process comments that are written about you in the course of your application process.

The data is stored for the purpose of processing your application and establishing an employment relationship (Art. 6 (1) lit. a DSGVO, § 26 BDSG-Neu). After receipt, your application will first be pre-sorted by the personnel department and, if you are interested, forwarded to the responsible head of the specialist department. If you receive a rejection, your documents will be deleted/destroyed in the specialist departments. For reasons of verifiability (contractual obligations, if applicable, personnel service providers, proof with regard to possible claims based on the General Equal Treatment Act), your data will be stored for a maximum of 12 months and then deleted. If we store your application for a longer period of time in order to contact you again at a later date about career prospects with our company, this will only happen if you give us your consent to do so (Art. 6 (1) lit. a DS-GVO). You can revoke your consent to data processing at any time.

We use the “Prescreen” e-recruiting system (Prescreen International GmbH, Mariahilfer Straße 17, 1060 Vienna) to receive and process applications, so your data is hosted in Presrceen’s systems. An agreement on commissioned processing in accordance with Art. 28 (3) DS-GVO is in place. In order to design its services in line with your needs and to enable trouble-free use of the platform, Prescreen collects statistical information about your surfing behaviour (e.g. which website areas you click on or your “log-in” times). This data may be recorded for the purpose of support or service optimisation and may be viewed by the Prescreen administrator at any time if required.

Furthermore, Presrceen uses the following “cookies” when operating the website:

• PHPSESSID, Session Cookie, storage duration only during current session.
• REMEMBERME, persistent cookie, storage period: two weeks.

To provide its services, Prescreen engages other subcontractors for the provision of IT services. In such cases, Prescreen contractually obliges the subcontractors to comply with the applicable data protection provisions.

For the generation of applicants we also use Mobile Funnel of the software perspective. You can find all info about this in § 3 “Use of Mobile Funnel”.

Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies). If you visit our site again in order to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again. As a rule, these are deleted after a maximum of 365 or 790 days.

We use the following cookies:

_ga Storage period: 28 months
_gid Storage period: 28 months
cookieconsent_status Storage period: 12 months

Within the framework of third-party tools, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see below). These analysis and tracking cookies enable us to automatically recognise that you have already been to our site when you visit it again. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. You can prevent the use of pixels on our pages by using appropriate tools or browser add-ons (e.g. the “AdBlock” add-on for the Firefox browser).
You can also object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/). Further opt-out options can be found in the following information on the tools we use.

Furthermore, we use Mobile Funnel (hereinafter: Funnel) for the technical implementation of various forms. The use of this tool also sets cookies, about which you can find more information in § 3 (section on the use of Mobile Funnel).

Use of Google reCAPTCHA
We use the Google reCAPTCHA programme from Google Inc. It is used to make a distinction, e.g. when registering for the newsletter or commenting on blog entries, between natural persons and automated processing. This distinction is necessary for us to exclude misuse of the content by automated processing. The legal basis for this is Art. 6 para. 1 p. 1 lit. f DS-GVO. When the page visitor uses reCAPTCHA, data is forwarded to Google. This is the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the amount of data transferred in each case; the website from which the request came, the browser; the operating system and its interface and the language and version of the browser software.

Your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. The deviating data protection regulations of the Google company apply to this data. Further information on Google’s data protection guidelines can be found at: https://www.google.com/intl/de/policies/privacy/.

Use of Google Analytics for web analysis
This website uses Google Analytics, a web analytics service provided by Google, Inc. (www.google.de). Google Analytics uses methods that enable an analysis of your use of the website, such as so-called “cookies”, text files that are stored on your computer. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.
You can prevent the collection of the data generated by the cookie and related to your use of the website (desktop) (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

At the end of the § you will find a link to deactivate the tracking and advertising scripts.

Google AdWords
We use Google AdWords to advertise our website. Google AdWords is an internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google’s search engine results exclusively when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed on topic-relevant web pages by means of an automatic algorithm and taking into account the previously defined keywords.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website. If a data subject accesses our website via a Google advertisement, a so-called conversion cookie will be stored by Google on the data subject’s information technology system. What cookies are has been explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages on our website have been called up. Through the conversion cookie, both we and Google can track how a data subject who arrived at our website via an AdWords ad acted, e.g. ordered a newsletter or not.
The data and information collected through the use of the conversion cookie will be used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which the data subject could be identified.

By means of the conversion cookie, personal information, e.g. the websites visited by the person concerned, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the USA and stored by Google in the USA. Google may pass on this personal data collected via the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programmes.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link https://www.google.de/settings/ads from any of the internet browsers he or she uses and make the desired settings there.

The legal basis lies in Art. 6 I f) DS-GVO. This service is used to analyse user behaviour on our website so that we are able to analyse and optimise our operations and design our web presence in a more interest-oriented manner.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.
Furthermore, the following information is available on this topic:
https://services.google.com/sitestats/de.html
https://google.com/policies/technologies/ads/

Google Tag Manager
For more efficient use and control of the web tracking tools, we use the Google Tag Manager. For this purpose, the Tag Manager records interactions that are made on the website and then sends them on to the connected tools. In this respect, the Tag Manager collects the personal data as already described in the use of the individual web tracking tools. This collection is primarily for the purpose of transmitting the data. As far as we are aware, no further processing takes place.

Information on the provider Google
The above-mentioned services are provided by Google Ireland Limited, a company registered and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google guarantees through certification according to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) that the data protection requirements of the European Union are complied with when processing data in the USA.

Use of LinkedIn Insight Tag
On our website, we use the LinkedIn insight tag of LinkedIn Corporation and the associated conversion tracking technology as well as the retargeting function of LinkedIn Corporation (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA or LinkedIn Ireland, Wilton Place, Dublin 2, Ireland). The LinkedIn insight tag is a JavaScript code snippet. Through the use of this code, the URL, referrer URL, IP address, device and browser properties, timestamp and page views of visitors are stored. This data is encrypted, anonymized within seven days. The anonymized data is deleted within 90 days. We do not receive any personal data from LinkedIn, but can only see aggregate reports on website audience and display performance. Provided you are logged into your LinkedIn account during an online session, LinkedIn associates your visit to this website with your personal user account. In addition, the use of the tag enables retargeting of visitors to our site. Based on this retargeting, we can target visitors to our website with advertising outside of our site.

With the help of the LinkedIn insight tag, we can measure the success of our site and optimize the site according to the results. In particular, as a business and HR consultancy, we would like to present our offer in a targeted manner to people who have already shown interest in a professional network. The use is based on your consent (Art. 6 para. 1 lit a) DSGVO), which you have given us via your selection in the cookie banner. You can object to the collection by the LinkedIn insight tag by selecting your advertising settings in your LinkedIn profile accordingly.
You can use the following link to opt out of the use of the LinkedIn Insight Tag and the use of interest-based advertising on LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

As a member, you must click on the “Opt out on LinkedIn” button, other visitors must click on the “Opt out” button.

Furthermore, you can opt-out of tracking by the LinkedIn Insight Tag by clicking on the “Opt-out of all tracking and advertising scripts” link below.

You can find more information about data protection at LinkedIn at: https://www.linkedin.com/legal/privacy-policy#choices-oblig

Deactivate tracking
Deactivate all tracking and advertising scripts

Social Plug Ins
Through the use of the plug-ins named below, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO. We use the so-called Shariff solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by marking the box with its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only when you click on the marked box and thereby activate it, does the plug-in provider receive the information that you have accessed the corresponding website of our online offer

• Facebook
• Twitter
• LinkedIn
• Xing

You have the option of interacting with the social network by clicking on the button. Please note that even without interaction on your part, your data will be collected by the provider of the social network. To the best of our knowledge, we inform you as follows:
By using the plug-in, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted.
According to the providers, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data may be transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.

The plug-in provider stores the data collected about you as a usage profile and uses it for the purposes of advertising, market research and/or designing its website to meet your needs. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid an assignment to your profile with the plug-in provider.

We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

Facebook privacy policy
http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Privacy policy Twitter
Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Privacy policy LinkedIn
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.

Privacy policy Xing
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

Integration of widgets from the providers kununu and glassdoor

We have integrated so-called “widgets” from the providers kununu and glassdoor on our careers page. The integration of these widgets means that if the overall rating of our company changes in these forums, this change is automatically adjusted on our website.

When you call up the page, kununu or glassdoor receives the information that you have called up the corresponding sub-page of our website. In addition, the IP address, date, time, content (specific page) of the request; the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted. This takes place regardless of whether the provider of the respective widget provides a user account via which you are logged in or whether no user account exists. If you are logged in to the respective provider, your data will be directly assigned to your account. If you do not wish to have your data associated with your profile, you must log out before accessing the provider’s site. We assume that the respective provider uses the data received for the purposes of advertising, market research, creation of user profiles or similar, but we cannot provide you with any concrete information on this.

The provider Glassdoor Inc. is certified under the E.U.-U.S. Privacy Shield agreement and, according to its own statement, processes the data in the function of the data controller. Please contact the respective provider for further information on the purpose and scope of the processing of the data as well as your rights and settings options in this regard:

• Privacy policy kununu: kununu GmbH, Neutorgasse 4-8, Top 3.02, A-1010 Wien,
  https://privacy.xing.com/de/datenschutzerklaerung
• Privacy policy glassdoor: Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, California, 94941, USA, https://www.glassdoor.com/about/privacy.htm, https://help.glassdoor.com/Privacy_Request/en_US

Integration of YouTube videos (extended data protection mode)
We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and its processing by YouTube, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Our company operates the following company presences in the social networks:

• Facebook
• Instagram
• Twitter
• YouTube
• LinkedIn
• XING
• kununu
• glassdoor

Joint responsibility and legal basis

As operators of these company presences, we jointly process personal data with the respective provider of the social network (joint responsibility pursuant to Art. 26 DS-GVO). By creating and publishing our company presences, we have accepted the terms of use of the respective social network, which regulate the conditions of use of the site and the resulting data processing.

The legal basis for the data processing is our legitimate interest (Art. 6 (1) lit. f DS-GVO) to present our company in common communication media and to offer applicants, interested parties and other persons a form of communication with our company that they prefer and that is common in today’s world.

We would like to point out that the use of social media by you, in particular the interactions with the networks such as posting and sharing, is at your own responsibility and that you can alternatively contact us via the contact form on the website or by mail/letter/phone.

Data processing during a visit to one of our company presences on social networks
According to our state of knowledge, we inform you as follows about the data processing that arises from the use of our appearances in social media.

When you visit one of our company websites on a social network, the provider of the social network receives information about you, your surfing and usage behaviour, your interactions and your respective location by collecting your IP address and using cookies, pixels and web beacons. From this information, the social network provider forms a user profile. We cannot exclude that data stored in the user profiles are stored across devices and/or that the user profile is linked to your data stored in the network.
The social network uses the information about you collected in this way to compile statistics about the use and user structure of the network and to place interest-based advertising within and outside the network. The advertising models of social networks also provide that the social networks transmit data about your usage behaviour to third parties (advertising partners) outside the network or receive data from them about your surfing/usage behaviour from outside the network.

The social networks provide advertisers with anonymised statistical data with their offers such as “Facebook Insights” or “LinkedIn Website Demographics”, e.g. information on page views, activities, proportion of men/women, professional position, company sector and much more (see https://www.facebook.com/iq/tools-resources/audience-insights and https://www.linkedin.com/help/lms/answer/82351). We have no influence on the data processing that takes place for this purpose, cannot prevent it and also do not have access to the underlying data.
We use these offers to better understand the structure of our users and their interests and to design our site accordingly. Furthermore, we and the providers of the social networks can better target advertising in this way because we learn, for example, information about the demographic and geographical distribution or about the gender of the users. In this way, we can recognise trends in our users from the statistics and show them more relevant content.
When using the services Facebook, Instagram, Twitter, YouTube, LinkedIn and glassdoor, data is transferred to the USA. These providers are certified under the Privacy Shield agreement and are obliged to comply with EU data protection standards.

Your rights as a data subject
From the terms of use, which we accepted when creating our company websites, it is regulated that you contact the respective provider of the social network regarding your rights as a data subject to information, objection, correction, restriction of processing, transferability and deletion, as only this provider has access to your data. You can find the information on the data protection of the providers here:

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland): https://www.facebook.com/about/privacy/, https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com,
• Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA) http://instagram.com/about/legal/privacy, https://help.instagram.com/155833707900388
• Twitter (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA) https://twitter.com/privacy; https://twitter.com/personalization
• YouTube (Google Ireland Limited, Sitz in Gordon House, Barrow Street, Dublin 4, Irland) https://policies.google.com/privacy, https://adssettings.google.com/authenticated
• LinkedIn (LinkedIn Ireland, Wilton Place, Dublin 2, Irland) https://www.linkedin.com/legal/privacy-policy
• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) – Datenschutzerklärung/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
• kununu (Kununu GmbH, Neutorgasse 4-8, Top 3.02, A-1010 Wien) https://privacy.xing.com/de/datenschutzerklaerung
• glassdoor (Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, 94941, USA), https://www.glassdoor.com/about/privacy.htm, https://help.glassdoor.com/Privacy_Request/en_US

You have the following rights with regard to the functions of our website explained in the section “Information on data processing” and the purposes of data processing described there:

Right to information (Art. 15 DSGVO)
We must provide you with information as to whether we are processing data relating to you. In the case of such processing, we must, among other things, explain the purposes for which the processing takes place, which categories of personal data are processed, to whom data may be transferred and for how long the data will be stored.

Correction (Art. 16 DSGVO), objection (Art. 21 DSGVO), restriction of processing (Art. 18 DSGVO)
If you discover that we are processing personal data that is incorrect or incomplete, you may of course request rectification. You may also object to the processing for specific reasons and, if justified, request the restriction of processing.

Deletion (Art. 17 DSGVO) and data portability (Art. 20 DSGVO)
In the event that personal data is processed by us, inter alia, without justification or after the purpose has ceased to apply, you may request its erasure. Please note that deletion may not always be possible due to the existence of legal obligations to provide proof/retention. Furthermore, you have the right to receive from us all information that you have provided to us in a structured, common and machine-readable format. For a better understanding and easier readability of the personal rights, we have summarised them here in parts. If required, please inform yourself in the (original text: link to http://eur-lex.europa.eu/legal-con-tent/de/TXT/?uri=CELEX%3A32016R0679) or contact our data protection officer directly. You can exercise your data protection rights at any time and without incurring any costs. Please use the following contact option for your request: info@oraylis.de.

Right to complain to a supervisory authority
You have the right to contact the supervisory authority for data protection regarding compliance with data protection and to lodge a complaint in this regard. The authority responsible for us is:

North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW).
Kavalleriestr. 2-4 | 40213 Düsseldorf
Telephone: 0211 384 24-0 | E-Mail: poststelle@ldi.nrw.de