Data privacy

General notes

The following communication provides a simple overview of what happens to your personal data when you visit this website. Personal data include all data that make it possible to identify you in person. Detailed information on the subject of data protection can be taken from our data protection policy listed below this text.

Data collection on this website

Who is the controller for data collection on this website?

Processing activities on this website are performed by the website operator. For contact details, see the imprint of this website.

How do we record your data?

Your data will be collected when you communicate them to us. These may be data you enter in a contact form, for example.

Other data will be recorded automatically or upon your consent by our IT systems when you visit the website. These are in particular technical data (e.g., web browser, operating system, or time at which the page was called up). These data are collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data are collected in order to ensure correct provision of the website. Other data may be used for analyzing your user behavior.

What rights do you have concerning your data?

You have the right to receive information on the origin, recipients and purpose of the personal data concerning you that are stored by us free of charge at any time. You also have the right to demand rectification or erasure of such data. You may revoke your consent to processing activities at any time, effective for the future. You also have the right to demand restriction of processing of your personal data under certain circumstances. Furthermore, you have a right to lodge a complaint with the competent supervisory authority. You may contact us at any time concerning this and any other questions relating to data protection using the address indicated in the imprint.

Analysis tools and tools of third-party providers

Your surfing behavior may be statistically evaluated when you visit this website. This is done in particular using cookies and analysis programs. For detailed information on these analysis programs, see the following data protection statement.

External hosting

This website is hosted by an external service provider (hoster). Personal data that are recorded on this website are saved on the hoster’s servers. These may be, in particular, internet protocol addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data that are generated via a website. The hoster is used for the purpose of contract performance towards our potential and existing customers (point (b) of Article 6(1) GDPR) and in the interest of secure, quick, and efficient provision of our online offering by a professional provider (point (f) of Article 6(1) GDPR). Our hoster shall only process your data as far as this is necessary for its compliance with its performance obligations; it shall observe our instructions in relation to such data.

Data protection

We as the providers of these pages take protection of your personal data very seriously. We treat your personal data confidentially and comply with the statutory data protection provisions and this data protection policy.
When you use this website, various personal data will be collected. Personal data are data that make it possible to identify you in person. This data protection policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.
Please note that data transmission through the internet (e.g., when communicating by email) may be subject to security gaps. Full data protection from third-party access is not possible.

Information on the controller

The controller for processing activities on this website is:
ARKTIS GmbH
Brunsbütteler Damm 152-176
D-13851 Berlin

Phone: +49 30 499782- 0
Email: office@arktis-gmbh.de

Contact with the data protection officer

ARKTIS GmbH
Data Protection Officer
Brunsbütteler Damm 152-176
D-13851 Berlin
datenschutz@arktis-gmbh.de

Withdrawal of your consent to processing activities

Many processing activities are only permitted with your explicit consent. You may withdraw consent once given at any time. An informal notification by email to us is sufficient for this. The lawfulness of the processing activities performed until the withdrawal will remain unaffected by this.

Right to object to data collection in specific cases and against direct marketing (Article 21 GDPR)

IF PROCESSING ACTIVITIES TAKE PLACE ON THE BASIS OF POINTS (E) OR (F) OF ARTICLE 6(1) GDPR, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA AT ANY TIME DUE TO REASONS RESULTING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RESPECTIVE LEGAL BASIS OF PROCESSING IN THIS DATA PROTECTION POLICY. IF YOU OBJECT, WE SHALL NO LONGER PROCESS YOUR PERSONAL DATA IN QUESTION, EXCEPT IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF PROCESSING SERVES TO ESTABLISH, PURSUE, OR DEFEND LEGAL CLAIMS (RIGHT TO OBJECT IN ACCORDANCE WITH ARTICLE 21(1) GDPR)
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF PERSONAL DATA RELATING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME; THIS SHALL INCLUDE PROFILING, AS FAR AS THIS IS CONNECTED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION IN ACCORDANCE WITH ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In cases of violations of the GDPR, the data subject has the right to lodge a complaint with the supervisory authority, in particular in the member state of their habitual place of residence, their workplace or the place of the alleged violation. The right to lodge a complaint shall be without prejudice to any other judicial remedy under administrative law or in court.

Right to data portability

You have the right to have any data that we process automatically on the basis of your consent or compliance with a contract transferred to you or a third party in a commonly used machine-readable format. If you demand direct transmission of the data to another controller, this shall be done only as far as it is technically feasible.

SSL or TLS encryption

This page uses SSL or TLS encryption for reasons of security and to protect the transmission of confidential contents, such as orders or queries that you send to us as the page operator. An encrypted connection can be recognized by the address line of the browser switching from “http://” to “https://” and the lock icon being shown in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by any third parties.

Information, blocking, erasure, and rectification

You have the right to free-of-charge information concerning your personal data stored by us, their origin and recipients, as well as the purpose of processing activities, and potentially a right to rectification or erasure of such data at any time within the framework of the applicable statutory provisions. You may contact us at any time concerning this and any other questions relating to the subject of personal data using the address indicated in the imprint.

Right to restriction of processing

You have the right to demand restriction of processing of your personal data. You may contact us at any time concerning this using the address indicated in the imprint. The right to restriction of processing shall apply in the following cases:

  • If you deny the accuracy of your personal data stored by us, we usually need time to verify this. You have the right to demand restriction of processing of your personal data for the duration of this review.
  • If processing of personal data is/was unlawful, you may demand restriction of processing activities instead of erasure.
  • If we no longer need your personal data but you need them to establish, defend, or assert any legal claims, you have the right to demand restriction of processing of your personal data instead of erasure.
  • If you have filed an objection in accordance with Article 21(1) GDPR, your and our interests must be reconciled. While it is not certain yet whose interests are overriding, you have the right to demand restriction of processing of your personal data for the duration of the review.

If you have restricted processing of your personal data, such data must – except for their storage – be only processed with your consent or to assert, exercise, or defend any legal claims, or for protection of the rights of another individual or legal entity, or based on an important public interest of the European Union or a member state.

 

Cookies

Our website uses “cookies”. Cookies are small text files that do not harm your terminal device. They are either stored on your terminal device temporarily for the duration of a session (session cookies), or permanently (permanent cookies). Session cookies are deleted automatically after the end of your visit. Permanent cookies remain stored on your terminal device until you delete them or until they are deleted automatically by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g., for the shopping basket function) or to optimize the website (e.g., cookies to measure the web audience) are stored on the basis of point (f) of Article 6(1) GDPR, unless another legal basis is specified. The website operator has as legitimate interest in recording of cookies for technically correct and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (point (a) of Article 6(1) GDPR); consent can be revoked at any time.

You can set your browser so that you will be informed when cookies are set and only allow cookies in individual cases, prevent acceptance of cookies for certain cases or in general, and activate automatic deletion of the cookies when you close the browser. If you deactivate cookies, the function of this website may be restricted.

If cookies are used by third parties or for analysis purposes, we will inform you separately within the framework of this data protection declaration and, if necessary, request your consent.

Cookie consent with Borlabs Cookie

Our website uses the cookie consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection law. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, D-21107 Hamburg (hereinafter: Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser to record the consents you have given or the revocation of such consent. This information is not shared with the Borlabs cookie provider.

The collected data will be stored until you ask us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details about the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs Cookie consent technology is used to obtain consent for the use of cookies as required by law. The legal basis for this is point (c) of the first sentence of Article 6(1) GDPR.

Server log files

The provider of the website will automatically collect and store information in server log files that your browser transmits to us automatically. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server query
  • IP address

These data will not be combined with any other data sources.

These data are acquired on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in the technically impeccable presentation and optimization of its website – for this, the server log files must be recorded.

Contact form

If you send us any queries via the contact form, your information from the contact form, including the contact details you indicate there, will be stored by us for processing of the request and in case we have any subsequent questions. We will not pass on your data without your consent.

These data will be processed on the basis of point (b) of Article 6(1) GDPR, provided that your query is connected to compliance with a contract or necessary to carry out pre-contractual measures. In any other cases, processing is based on our legitimate interests in effective processing of the queries addressed to us (point (f) of Article 6(1) GDPR) or your consent (point (a) of Article 6(1) GDPR) if this was requested.

The data you entered in the contact form will remain with us until you request that we erase them, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been completely processed). Mandatory statutory provisions – in particular archiving periods – shall remain unaffected by this.

Queries by email, phone, or fax

If you contact us by email, phone, or fax, we will store your query, including any personal data evident from it (name, query) for the purpose of processing your request. We will not pass on your data without your consent.

The data you submitted to us in contact requests will remain with us until you request that we erase them, withdraw your consent to storage or the purpose for data storage no longer applies (e.g., after your request has been completely processed). Mandatory statutory provisions – in particular statutory archiving periods – shall remain unaffected by this.

 

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses “cookies”. These are text files that are stored on your computer and that permit analysis of your use of the website. As a rule, the information generated by the cookie through your use of this website is sent to a Google server in the USA and stored there.

Google-Analytics cookies and use of this analysis tool are based on point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in analysis of the user behavior in order to optimize both its web offer and its marketing. If the corresponding consent was requested (e.g., consent to save cookies), processing shall take place exclusively on the basis of point (a) of Article 6 (1) GDPR; the consent can be withdrawn at any time.

IP anonymization

We activated the function IP anonymization on this website. This way, your internet protocol address will be abbreviated by Google within member states of the European Union or in other contracting states of the convention on the European Economic Area before transfer to the USA. Only in exceptional cases will the full IP-Address be transmitted to a Google server in the USA and shortened there. On the order of the operator of this website, Google will use this information in order to evaluate your use of this website, to compile reports on the website activities, and in order to render further services connected to internet use for the website operator. The IP address transmitted by your browser within the context of Google Analytics will not be combined with any other Data of Google.

Browser plugin

You may prevent storage of the cookies by making the corresponding settings in your browser software; however, note that you may be unable to fully use all functions of the website in such a case. You can also prevent recording of the data created by the cookie and referring to your use of the website (incl. your IP address) to Google and processing of these data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You may prevent recording of your data by Google Analytics by clicking the following link. An opt-out cookie is placed that prevents recording of your data at future visits of this website: Deactivating Google Analytics.

For more information on how Google Analytics handles user data, please see Google’s privacy policy https://support.google.com/analytics/answer/6004245?hl=de.

Processing based on a contract

We have concluded a contract with Google for contract data processing and implement the strict specifications of the German data protection authorities when using Google Analytics completely.

Demographic features at Google Analytics

This website uses the function “demographic features” of Google Analytics. This permits compilation of reports that contain statements on age, gender, and interests of the visitors to the pages. These data originate from interest-related marketing of Google and visitor data of third-party providers. These data cannot be associated with any specific person. You may deactivate this function at any time via the advertisement settings in your Google account or generally prohibit collection of your data by Google Analytics as described in the item “Objection to data collection”.

Duration of storage

Data stored by Google on user and event level and linked with cookies, user identifiers (e.g., user ID) or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) are anonymized or deleted after 14 months. For details on this, see the following link: https://support.google.com/analytics/answer/7667196?hl=de

 

YouTube with extended data protection

This website integrates videos by YouTube. The provider of these pages Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the extended data protection mode. According to YouTube, YouTube will not store any information on the visitors of this website before they watch the video in that mode. On the other hand, the extended data protection mode does not necessarily prevent that data are passed on to YouTube partners. No matter if you are watching a video, YouTube will connect to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection with the YouTube servers will be established. This informs the YouTube server about which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to associate your surfing behavior with your personal profile. You can prevent this by logging out of your YouTube account first.

Furthermore, YouTube may store various cookies on your terminal device after a video starts. YouTube can gain information concerning visitors of that website using those cookies. This information is used, among other things, in order to record video statistics, improve user friendliness and to prevent attempted fraud. The cookies will remain on your terminal device until you delete them.

If applicable, further processing activities that we cannot influence may be triggered after a YouTube video is started.

YouTube is used in the interest of attractive display of our online offer. This is a legitimate interest within the meaning of point (f) of Article 6(1) GDPR. If the corresponding consent was requested, processing shall take place exclusively on the basis of point (a) of Article 6 (1) GDPR; the consent can be withdrawn at any time.

For more information about privacy at YouTube, please see their privacy policy at https://policies.google.com/privacy?hl=de.

Vimeo

This website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection to servers of Vimeo will be established. This informs the Vimeo server about which of our pages you have visited. Vimeo will also receive your internet protocol address. This shall also apply if you are not logged in at Vimeo or do not have any account at Vimeo. The information recorded by Vimeo will be transmitted to the Vimeo server in the USA.

If you are logged in to your Vimeo account, you enable Vimeo to assign your surfing behavior to you personally. You can prevent this by logging out of your Vimeo account first.

Vimeo is used in the interest of attractive display of our online offer. This is a legitimate interest within the meaning of point (f) of Article 6(1) GDPR. If the corresponding consent was requested, processing shall take place exclusively on the basis of point (a) of Article 6 (1) GDPR; the consent can be withdrawn at any time.

For more information on how we handle user data, please see Vimeo’s privacy policy at https://vimeo.com/privacy.

Google Web Fonts

This website uses Web Fonts provided by Google for consistent display of fonts. When calling up a website, your browser will load the required web fonts into your browser cache in order to properly display texts and fonts.

For this purpose, the browser you use must connect to the servers of Google. This way, Google will obtain the information that this website was called up from your internet protocol address. Google WebFonts are used based on point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in consistent display of the fonts on its website. If the corresponding consent was requested (e.g., consent to save cookies), processing shall take place exclusively on the basis of point (a) of Article 6 (1) GDPR; the consent can be withdrawn at any time.

If your browser does not support Web Fonts, a standard font of your computer will be used.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy https://policies.google.com/privacy?hl=de.

Google Maps

This page uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Your internet protocol address must be stored for using the functions of Google Maps. This information is usually transmitted to a server Google server in the USA and stored there. The provider of this page cannot influence this data transmission.

Google Maps are used in the interest of an attractive presentation of our online offer and to make it easier to find the places named by us on the website. This is a legitimate interest within the meaning of point (f) of Article 6(1) GDPR. If the corresponding consent was requested, processing shall take place exclusively on the basis of point (a) of Article 6 (1) GDPR; the consent can be withdrawn at any time.

More information about the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

 

Handling of applicant data

We offer the option of applying to us (e.g., by email, mail, or online application form). Below, we inform you about the scope, purpose, and use of your personal data collected within the application process. We represent that collection, processing, and use of your data will take place in correspondence with the applicable data protection law and any other statutory provisions and that your data will be treated strictly confidentially.

Scope and purpose of data collection

If you submit an application to us, we will process your personal data connected to it (e.g., contact and communication details, application documents, notes taken during job interviews, etc.), as far as this is necessary to make a decision on founding of an employment relationship. The legal basis for this is Section 26 of the revised Federal Data Protection Act (Bundesdatenschutzgesetz-neu; BDSG-neu) under German law (preparation of an employment), point (b) of Article 6(1) GDPR (general preparation of a contract) and, provided that you have given your consent, point (a) of Article 6(1) GDPR. You may withdraw your consent at any time. Your personal data will only be passed on to persons involved in processing of your application within our company.

If your application is successful, your data submitted to us will be stored in our data processing systems based on Section 26 BDSG-neu and point (b) of Article 6(1) GDPR in order to process the employment.

Archiving duration of the data

If we cannot offer you a job, if you refuse a job offer, or if you withdraw your application, we reserve the right to store the data submitted by you for up to 6 months after the end of the application proceedings (revocation or withdrawal of the application) based on our legitimate interest (point (f) of Article 6(1) GDPR). After this, the data will be deleted, and the physical application documents will be destroyed. Storage in particular serves the purpose of evidence in the case of a legal dispute. If it is evident that your data will still be required after the end of the period of 6 months (e.g., due to a threatening or pending legal dispute), they shall only be deleted once the purpose for further storage has become irrelevant.

Longer storage is also possible if you have consented to this (point (a) of Article 6(1) of the GDPR) or if any statutory archiving obligations oppose deletion.

Inclusion of the applicant pool

If we do not offer you a job, we may be able to include you in our applicant pool. If you are included in the pool, all documents and information from your application will be transferred to the applicant pool in order to contact you if any matching vacancy arises.

Inclusion in the applicant pool shall only take place based on your consent (point (a) of Article 6(1) GDPR). Consent is voluntary and not related to the ongoing application procedure. The data subject may revoke their consent at any time. In this case, the data will be deleted irrevocably from the applicant pool if there are no statutory grounds for storage that oppose this.

The data from the applicant pool shall be deleted irrevocably at the latest two years after consent is given.