Privacy Policy

Thank you for your interest in our website. We attach great importance to the protection of your privacy in the processing of personal data as well as the security of all business data and take this into account in our business processes. Here we provide you with detailed information about how your data is handled.

 

Section 1 Information about the collection of personal data

 

(1) In the following we inform you about the collection of personal data when you use our website. Personal data is all data which can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

 

(2) The controller pursuant to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) is

 

effective GmbH

L13, 3-4

68161 Mannheim

Germany

Managing Director: Hermann Bareis

Tel.: Telephone +49 621 17893 0

Email: mannheim@effective-world.com

 

See also our Legal notice.

 

Our Data Protection Officer can be contacted at dataprotection@effective-world.com or our postal address, please add “The Data Protection Officer” to the address.

 

(3) If we use service providers for individual functions of our site or would like to use your data for advertising or other purposes or pass it on to third parties, we provide detailed information for each case below.

 

Section 2 Your rights

 

(1) We clarify below your rights as a data subject pursuant to Article 15 GDPR. You can exercise these rights at any time and contact us directly for this reason. If you assert these rights against us, we will examine them thoroughly taking into account the related statutory requirements. For this purpose we may need to ask you to provide further information. We will explain to you in detail the results of our examination and the action we have taken to fulfil your request. It is possible that we may not be able to comply with your wishes fully in the manner you desire. This should not deter you from asserting your rights against us or asking us questions concerning this matter. We will be pleased to answer all of your questions.

 

(2) Right of access

You have the right to be informed at any time about whether we are processing your personal data and what personal data concerning you we are processing. This also includes information about the purpose of the processing, where applicable on recipients to whom data has been disclosed, the planned retention period, where applicable information on the origin of this data, if we have not collected this directly from you. You also have the right to a single copy of your personal data stored by us free of charge. For the issue of further copies, we reserve the right to charge a reasonable administration fee.

 

(3) Right to rectification

You have the right to demand that we rectify any incorrect data we have stored about you. This also includes the right to ask for the completion of incomplete personal data.

 

(4) Right to erasure

You have the right to demand that we erase (delete) data that we have stored about you. If we have published data concerning you, our obligation in the context of the “right to be forgotten” pursuant to Article 17(2) GDPR also includes, taking into account available technology and the cost of implementation, all links to this data and all copies and replications concerning this data and forwarding your deletion request to further controllers responsible for the processing of this published personal data.

 

(5) Right to restriction of processing

You have the right to demand that we restrict the processing of data concerning you that we have stored. After this, any processing of this data will only be possible with your consent or for a few statutory purposes.

 

(6) Right to object to processing

If we base the processing of your personal data on the basis of an assessment of our legitimate interest, you may object to the processing. This is the case if the processing in particular is not required for the performance of a contract with you, which is explained by us in each case in the following description of the functions. When you exercise a right to make such an objection, we ask that you explain the reasons why we should not process your personal data as performed by us. When we receive your objection with reasons, we will examine the situation and either stop or adjust the data processing or explain to you our compelling legitimate grounds for continuing the processing.

 

You can of course object to the processing of your personal data for advertising and data analysis purposes. You can inform us of your objection to processing for advertising purposes using the contact details under Section 1(2).

 

(7) Right to withdraw consent under data protection law

If you have given consent for your data to be processed, you can withdraw your consent at any time. Any such withdrawal of consent applies to the processing of your personal data after you have given us notice of withdrawal.

 

(8) Right to data portability

You have the right to receive from us the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format for the purpose of transfer to another controller. This also includes, upon your request and taking into account the available technical possibilities, the direct transfer from us to the other controller.

 

(9) Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint at any time with a data protection supervisory authority regarding the processing of your personal data by us.

 

Section 3 Collection of personal data when you visit our website

 

(1) When you use our website purely for informational purposes, i.e. if you do not register or provide us with any other information, we will only collect the personal data which your browser sends to our server. If you would like to view our website, we will collect the following data which is required by us for technical reasons to display our website to you and to ensure stability and security (the legal basis for this is provided by Article 6(1)(f) GDPR):

 

  • IP address
  • Host name
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Data volume transmitted
  • Website from which the request comes (referrer)
  • The specific pages of our website accessed by you
  • Browser: Type, version and language setting
  • Operating system: Type and version
  • If JavaScript is activated, also:
    • Screen resolution
    • Colour depth
    • Size of the browser window
    • Installed browser plugins

(2) In addition to the above data, when you use our website cookies will be stored on your computer. Cookies are small text files which are stored on your hard drive, are allocated to the browser used by you and through which certain information is sent to the body which places the cookie (here by us). Cookies cannot execute any programmes or transmit viruses to your computer. They serve to make the website on the whole more user friendly and more effective.

 

(3) Use of cookies:

 

a)  This website sets the following cookies on your device directly or via external sources:

 

Name

Type

Purpose/source

Lifetime

_gat_UA-[…]

Statistical

Used by Google Analytics to limit the request rate.

Set by effective-world.com.

1 minute

_ga

Statistical

Registers a unique ID that is used to generate statistical information about how you use the site.

Set by effective-world.com.

2 years

_gid

Statistical

Registers a unique ID that is used to generate statistical information about how you use the site.

Set by effective-world.com.

1 day

PHPSESSID

Necessary

Used to manage your visit to our website for technical purposes during the current browser session.

Set by effective-world.com.

End of session

cookie_overlay

Necessary

Used to display and manage a cookie notice.

Set by effective-world.com.

End of session

 

b)  We also use HTML5 storage objects to the extent required for technical purposes, which are stored on your device.

 

c)  You can configure your browser settings as you wish and, e.g., refuse to accept third-party cookies or all cookies. Please note that you then may not be able to use all the functions of this website.

We generally recommend that you delete cookies and your browser history, either automatically or manually at regular intervals, to increase the protection of your privacy.

 

Section 4 Further functions and offerings of our website

 

(1) In addition to the use of our website purely for information purposes, we also offer a range of services which you can use if you are interested. For this purpose, you usually have to provide additional personal data which we use to provide the respective service and to which the above data processing principles apply. Mandatory fields are marked with an asterisk. Information input into fields not marked with an asterisk is provided on a purely voluntary basis.

 

(2) When you contact us by email or via a contact form, your email address and other data that you provide to us will be stored by us in order to reply to your inquiry. If there is a commercial relationship between us or if such a relationship is established as a result of your inquiry, we will store this data for the duration of our commercial relationship. Otherwise we will delete this data after storage is no longer necessary to process your inquiry in full. If there are statutory retention periods that prevent us deleting data, we restrict the processing of your data for the duration of the retention periods, then delete the data. When contacting us via a contact form, please note the mandatory fields, as described under paragraph 1, so that you do not unintentionally send personal data that is not required. By sending the contact form or your email, you are consenting to us processing the data you have sent in this way (legal basis: Article 6(1)(a) GDPR).

 

(3) In some cases we will use external service providers to process your data. These have been carefully selected and commissioned by us, have to follow our instructions and are controlled regularly.

 

(4) If our service provider or partner is based in a country outside of the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offering.

 

Specific types of use

 

1. Use of our job application portals

 

(1) On our website you have the opportunity to apply online for jobs or apprenticeships offered by us. In your online application you will provide us with personal data. We attach great importance to your personal data being handled confidentially during the application process. All personal data which you entrust us with will therefore be treated in strict confidence and responsibly as a matter of course in accordance with the applicable statutory data protection regulations. We employ technical and organisational security measures to protect your data from accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. When personal data is collected and processed, the information is transferred in TLS encrypted form in order to prevent any misuse of the data by third parties. The legal basis for the processing of personal data you provide to us when making your application is that your data is required for steps prior to entering into a contract, pursuant to Article 6(1)(b) GDPR. If the data submitted by you for application purposes also includes highly sensitive special categories of data pursuant to Article 9(1) GDPR, this data will be processed by us on the legal basis of your consent pursuant to Article 6(1)(a), which we must obtain from you for this reason as explained in paragraph 3.

 

(2) If you would like to apply online for a job or an apprenticeship, you will need to enter certain personal data marked as mandatory fields in the respective online application form, e.g. last name, first name and e-mail address. In order to make it easier for us to contact you, you can also enter additional contact details voluntarily, in particular your landline and mobile telephone number. In order to allow us to better meet your application needs, you can also send additional data and files to us voluntarily, e.g. a personal message, information about your professional qualifications and experience and files with your application documents, such as your personal letter, your résumé, your application photo, your references etc. Please note that in particular résumés, references or other files sent by you for application purposes may also contain particularly sensitive data, such as information on your race or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union or political party, on your physical or mental health or on your sex life.Please note that in particular résumés, references or other files sent by you for application purposes may also contain particularly sensitive data, such as information on your race or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union or political party, on your physical or mental health or on your sex life. We therefore recommend that you as far as possible do not disclose any sensitive data of special categories.

 

(3) It cannot be ruled out and in some cases it is also necessary that you provide us with special categories of data in your application as listed under paragraph 2. We are prohibited by law from processing such data without your consent. The data you enter in the online application form and the uploaded files will therefore only be sent to us if you have declared by clicking the relevant check box that you consent to the processing of this sensitive data of special categories in accordance with this Privacy Policy. Without this consent you will unfortunately not be able to use our application portal.

 

(4) The data and files you send will be stored and used solely for purposes relating to the recording and processing of your interest in a job or apprenticeship in our company and the processing of your online application, including contacting you for this purpose. Your application will be treated as confidential and only authorised employees of the effective world Group will have access to it. If your application is successful, the data and files sent by you can be used in the employment relationship with you. If your application for a job is not successful, we will hold the data and files sent by you for 4 months in our applicant database so that we can answer any questions relating to your application. After this time the data and files will be deleted automatically. If you have given consent to be included in our applicant pool, so that the data you have submitted can also be considered for other vacant positions, your data and files will be stored for 12 months in the applicant database and deleted automatically after this time.

 

(5) Your data and files submitted in the online application will not be passed onto third parties, unless you have given your express consent or we are required to by an administrative order. Your data is only transferred to other companies in effective world Group if you have given your consent.

 

(6) You may withdraw your application at any time in whole or in part. You can also request at any time that all or some of the data and files submitted by you are deleted from our applicant database or modified. You are also entitled to withdraw your consent to the processing of special categories of personal data that you have submitted in the context of the online application or to the forwarding of your application documents to other companies within the effective world Group at any time with effect for the future. For this purpose, you only need to send an e-mail to career@effective-world.com. However, some data relating to your application has to be stored for a limited time of 4 months in order to meet legal requirements, in particular the obligation to provide proof under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG). With regard to your basic rights, see Section 2 of this Privacy Policy.

 

Web analytics

The legal basis for the use of all of the web analysis tools listed in this section is provided by Article 6(1)(f) GDPR, i.e. the protection of our legitimate interests taking into account the interests of the visitors to our website. Our interest lies in the analysis of the use of our website by its visitors and the use of the statistics gained from this to improve our offering and make it more interesting for you as a user. If the analysis tool that is used also serves other purposes or if we use it for other interests of ours, we will inform you about this directly in the description of the respective analysis tool.

 

1. Use of Google Analytics

 

(1) This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, text files which are stored on your computers and allow an analysis of the use of the website. The information produced by the cookie on your use of this website will be transmitted to and stored on a Google server in the USA. In the event of IP anonymisation being activated on this website, your IP address will however be shortened beforehand within member states of the European Union or in other states signed up to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA, where it will be shortened. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on the website activities and perform further services related to the use of the website and internet for the website operator.

 

(2) You may prevent cookies from being stored with an appropriate setting in your browser software; we point out, however, that in this case you will not have full use of all of the functions on this website. You may also prevent data generated by the cookie and relating to your use of the website (including your IP address) being collected and processed by Google by downloading and installing the browser plugin available at the link: https://tools.google.com/dlpage/gaoptout?hl=en . Alternatively, you can use this link to set an opt-out cookie that will prevent your information from being collected on future visits to this site. Please note that, after you delete the cookies stored on your device, you will have to set this cookie again to continue to prevent your data from being collected on this site.

 

(3) This website uses Google Analytics with the anonymisation feature. As a result IP addresses are only processed in shortened form in order to prevent a link to an individual.

 

(4) For exceptional cases where personal data is transferred to the USA, Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

(5) Information about the third-party provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
General Privacy Policy: https://www.google.de/intl/de/policies/privacy and https://www.google.com/policies/privacy/partners/?hl=en

Specific privacy information for Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631

Google LLC, the parent company of Google Ireland Ltd, complies with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

 

Social media and other services of third parties

 

1. Social media

 

(1) We currently do not use plug-ins from social media providers on our website, but have provided links to our profiles with the following social media providers: Facebook, LinkedIn. These links on their own do not transfer personal data to those providers. The provider only has access to your personal data if you click on the link, which is shown with the icon for the social media provider, and thereby access our page hosted by that provider.

 

(2) Pursuant to the judgement by the ECJ in case C-210/16, we are responsible under data protection law as the operator of our fan page hosted by Facebook together with Facebook for the processing of the personal data collected when our Facebook fan page is visited. We therefore provide corresponding information on privacy here. Please read this information if you would like to visit our Facebook fan page. As the reasoning behind the judgement may also apply to other social media providers, our Privacy Policy also includes information about our other profiles. Our Privacy Policy also includes links to the privacy policies of the social media providers.

 

(3) In addition, we only provide you with the option of sharing content from our website on your social media account with links. We use the web interfaces provided by the social media providers for this purpose. When you click on the link, in addition to the contents specified by us, the data listed under Section 3 of this data protection notice is sent to the applicable social media provider and you are forwarded to the provider's website. To share content, you must first log in to your social media account or you must already be logged in. The data that is sent will be linked to your social media profile and used by the provider for its own purposes. We have no knowledge of whether and to what extent this data is used, including when you are not logged into the social media site. These links on their own do not transfer personal data to those providers. The provider only has access to your personal data if you click on the link, which is shown with the icon for the social media provider, and thereby use the share function.

 

(4) Addresses of the applicable social media providers and URLs with their privacy policies:

 

a)  Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information about data collection: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications and https://www.facebook.com/about/privacy/your-info#everyoneinfo. Google complies with the EU-US Privacy Shield , https://www.privacyshield.gov/EU-US-Framework.

 

b)  LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy. LinkedIn complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

2. Integration of Google reCAPTCHA

 

(1) This website uses Google reCAPTCHA. We use this service in the interest of defending ourselves against the misuse of our contact forms by bots. The legal basis for the use of the plug-in is provided by Article 6(1)(f) GDPR.

 

(2) The Google reCAPTCHA plug-in on our web pages is used to distinguish between bots (automated programs) and humans. For this purpose, you either have to carry out certain actions for the plug-in that bots are not capable of doing with the current state of technology or your interaction with our website is analysed by an algorithm. Your input and interactions are sent to Google and analysed by Google. The plug-in then provides feedback as to whether you are likely to be a human or a bot, so that our site can react accordingly. The data under Section 3 of this Privacy Policy is also sent to Google, even if you do not use the reCAPTCHA plug-in. This happens regardless of whether Google has provided you with a user account which you are logged into or whether you have a user account at all. If you are logged in to Google, your data will be associated directly with your account. If you do not wish the data to be associated with your Google profile, you must log out before you access the subpage. Google stores your data as usage profiles and uses it for the purpose of advertising, market research and/or to design the website to meet the needs of users. Such an analysis is done in particular (even for users who are not logged in) to provide appropriate advertising and in order to inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact Google to exercise this right. We do not know whether and how Google actually uses your input and interactions for the reCAPTCHA plug-in for its own purposes or links them to your Google user profile.

 

(3) More information about the purpose and scope of data collection and processing by Google is available in its privacy policy. The policy also provides further information about your rights in this respect and the settings you can use to protect your privacy: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.de/intl/de/policies/privacy and https://www.google.com/policies/privacy/partners/?hl=en. Google LLC, the parent company of Google Ireland Ltd, complies with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

 

3. Integration of other services of third parties

 

(1) This website also uses services provided by Google (Google Fonts for fonts and Google Tag Manager to manage tags/plug-ins) and Typotheque (for fonts). By using these services, we can offer you a better user experience on our website. This serves our interest of making our website more attractive. The legal basis for the use of these services is provided by Article 6(1)(f) GDPR.

 

(2) When you visit the website, the respective third-party provider will be informed that you have accessed the corresponding subpage of our website. The data under Section 3 of this Privacy Policy is also sent. This happens regardless of whether this third-party provider has provided you with a user account which you are logged into, or if there is no user account. If you are logged in to the third-party provider, this data will be associated directly with your account. If you do not want your profile to be associated with the third party provider, you must log out before visiting our website. The third-party provider may store this data as a usage profile and use this for the purpose of advertising, market research and/or to design the website to meet the needs of users. Such analysis is carried out in particular (even for users who are not logged in) to provide appropriate advertising and in order to inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles, whereby you have to contact the respective third-party provider in order to exercise this right.

 

(3) Further information about the purpose and scope of data collection and processing by the third-party provider is provided in the privacy policies of these providers, which are listed below. The policy also provides further information about your rights in this respect and the settings you can use to protect your privacy:

 

(4) Addresses of the respective providers and URL with their data privacy policies:

a)  Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.de/intl/de/policies/privacy and https://www.google.com/policies/privacy/partners/?hl=en. Google LLC, the parent company of Google Ireland Ltd, complies with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

b)  Typotheque, Zwaardstraat 16, 2584 TX The Hague, Netherlands; https://www.typotheque.com/tag/privacy

 

Date: 23/02/2020