Data protection

Handling personal data confidentially and securely is very important to us. We comply with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG) and other European regulations and would like to inform you in detail and transparently about the processing of your personal data.

Personal data is any data that relates to you personally, such as name, address, e-mail addresses or user behavior. With regard to the other terms used below, such as “responsible person” or “processor”, we refer to the definition catalog of definitions in Article 4 of the GDPR.

We have structured our information on the processing of personal data as follows:

  • Privacy policy for our website https://www.modell-aachen.de
  • Data protection in the application process at Modell Aachen GmbH

Website privacy policy

Person responsible

The processing of personal data in connection with the website https://www.modell-aachen.de through the

Modell Aachen GmbH
Interactive management systems
Am Kraftversorgungsturm 5
52070 Aachen
email: qwiki@modell-aachen.de
(“Modell Aachen”, “we”)


Modell Aachen has appointed a data protection officer, whom you can contact using the following contact details:

Modell Aachen GmbH
For example data protection officer
Am Kraftversorgungsturm 5
52070 Aachen
email: datenschutz@modell-aachen.de

Type of data and purpose of processing personal data

When using the website for purely informational purposes, we only process the personal data that your browser transmits to our servers.  

When you access the website, we process the following data on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR, which is technically necessary for us to display our website to you and to ensure data security and the stability and security of our IT systems:

  • Browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • Time of server request
  • IP address

The processing of the IP address serves to protect against and traceability of hacker and cyber attacks. The remaining data is processed to deliver the content of our website, to ensure the functionality of our information technology systems, to optimize our website and to ensure the functionality of the website. The data in the log files is always stored separately from other personal user data. This processing of your data mentioned above is necessary to protect our legitimate interests and is justified by a balancing of interests in our favor.

We have a legitimate interest in ensuring that the website and the services offered there work technically and protect against attacks. Your legitimate interest that your data mentioned above is not used for this purpose does not outweigh our legitimate interest, as we use this data appropriately in accordance with the processing purpose described and you also benefit from the functionality of the website.

Contact via e-mail, telephone or fax

If you contact us by email, telephone or fax, your request, including all resulting personal data (name, request, time), will be stored and processed by us for the purpose of processing your request.

This data is processed on the basis of Article 6 (1) sentence 1 lit. b GDPR, provided that your request is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in the effective processing of inquiries addressed to us.

The data you send us via contact requests will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions — in particular statutory retention periods under § 147 AO and § 257 HGB — remain unaffected.

Use of cookies

Our website places cookies on your device. These are small text files that are used for different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to be able to perform certain actions or functions on the website (functional cookies). If we use third-party services on our website, for example to process payment transactions, these companies may also leave cookies on your device when you visit the website (so-called third-party cookies).

If we use third-party cookies from other companies or for analysis purposes, we will inform you about this in general within the framework of this privacy policy and, more specifically, in further information about the individual cookies as part of our cookie banner (purpose, duration, technical information about the type of cookie, etc.). We also ask for your prior consent via our cookie banner when you visit our website.

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. Necessary and functional cookies are therefore stored on your device on the basis of Section 25 (2) No. 2 of the Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG) and Art. 6 (1) (f) GDPR.

We use all other cookies on the basis of Section 25 (1) TDDDG and Art. 6 (1) lit. a DSGVO, provided that you give us appropriate consent.

With regard to consents given, you have the option at any time to change the decision you have made and to give your consent retrospectively or withdraw it with effect for the future. The cookie and consent banner can be accessed at any time via the icon (letter clip), which is permanently embedded at the bottom right of our website.

The use of the cookie banner is justified by our legitimate interests in the use of optimised consent management in accordance with Art. 6 (1) (f) GDPR. With the help of the tool, we, as the person responsible, comply with our legal obligations under the TDDDG and the GDPR as well as the ECJ case law on cookies. Overriding conflicting legitimate interests of the user, which outweigh our interests, are not apparent.

Use of third parties (advertising, analysis, etc.)

We use the following third-party tools to analyze the behavior of our website visitors, display advertising to them, or offer other website features.

The use of these tools requires your prior consent in accordance with Article 6 (1) (a) GDPR or Section 25 (1) TDDDG. We obtain this via the cookie banner (Cookie Bot from Usercentrics) of the corresponding website. If you have given your consent to use one or more of the following services, various cookies are used by third parties and data is transmitted to the services. The consent may also include the transfer of certain personal data to third countries, including the USA, in accordance with Art. 49 para. 1 lit. a GDPR.

You can withdraw your consent at any time with effect for the future. To do so, please use our consent and cookie banner via the icon (letter clip), which is permanently embedded at the bottom right of our website.

Loom Inc. (integration of video material)

We use the service provider Loom Inc., based in San Francisco, 140 2nd Street, 3rd Floor, United States, to integrate videos (e.g. YouTube) on our website.

In doing so, various personal data from you is processed and transmitted to Loom. This includes your IP address and technical usage data (such as viewed videos, views, interest in content, time stamps).

  • Legal basis: Consent, Art. 6 (1) (a) GDPR

Linkedin

We use the service provider LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland to integrate contributions from the LinkedIn community on our website.

In doing so, various personal data about you is processed and transmitted to LinkedIn. This includes your IP address, usage data (such as websites visited, interest in content, time stamp) and, if applicable, meta and communication data such as name, email, address or LinkedIn login.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for transfer to third countries: standard contractual clauses or EU-US Privacy Framework

Xing

We use the service provider Xing.de, New Work SE, Am Strandkai 1, 20457 Hamburg on our website. Xing is used in connection with the “Kununu” rating function and offers the user the opportunity to review Modell Aachen GmbH as an employer; the IP address is also processed for this purpose.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Meta Platforms (Facebook)

We use the service provider Meta Platforms Ireland Limited (“Meta”), Merrion Road, Dublin 4, D04 X2K5, Ireland and operate a “Facebook Page” for Modell Aachen GmbH.

Together with Meta, Modell Aachen GmbH is responsible for collecting or receiving data as part of a transmission of data that Facebook collects using the Facebook social plug-ins or as part of the Facebook page or receives as part of a transmission for the following purposes, in accordance with Article 26 GDPR:

  1. displaying content and advertising information that corresponds to the presumed interests of users;
  1. delivery of commercial and transaction-related messages (e.g. addressing users via Facebook Messenger);
  1. Improving ad delivery and personalizing features and content (e.g. improving the recognition of which content or advertising information presumably meets users' interests).

We have concluded an agreement with Facebook in accordance with Art. 26 GDPR (cf. https://www.facebook.com/legal/controller_addendum), which in particular regulates which security measures Facebook must take. Facebook has also agreed to comply with data subject rights under the GDPR in connection with joint processing, i.e. requests for information and deletion.

If Meta provides us with aggregated anonymous measurements, analyses and reports, this processing is not carried out within the framework of joint responsibility under Article 26 GDPR, but on the basis of an order processing contract in accordance with Article 28 GDPR.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Meta's privacy policy: https://www.facebook.com/privacy/policy/
  • Basis for transfer to third countries: Standard Contractual Clauses & EU-US Privacy Shield

Microsoft Bookings (form to book updates)

For the purpose of organizing, planning and carrying out consultation appointments with customers (in particular product updates), we use the Microsoft Bookings service, from Microsoft Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521.

As part of booking an appointment, your IP address and the data that you provide to us when booking an appointment will be processed. This may include: name, telephone number, e-mail address, preferred form of communication or communication tool, time of appointment request and agreed appointment, reason for your request or interests, and free text added by you.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for third-country transfer: EU-US Privacy Shield

Google Analytics

We use the services of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Analytics to measure and analyze the use of our website. In doing so, we use a pseudonymous user identification number that does not contain any personal data such as names or email addresses. This identification number makes it possible to assign analysis information to a specific terminal device. We use Google Analytics to identify which content users have accessed during various usage processes, which search terms they have used and how they have interacted with our website.

In addition, the time of use and other technical information about the users' devices and browsers are stored. This creates pseudonymous profiles that can combine information from the use of different devices. Google does not log or store individual IP addresses for EU users. However, rough geographical location data is derived by analyzing metadata from IP addresses. These include city (as well as derived latitude and longitude), continent, country, region, and subcontinent. In the case of EU data traffic, IP address data is used exclusively to derive geolocation data and is then immediately deleted. They are not accessible and are not used for any other purposes. All IP queries are made on EU-based servers before the data is forwarded to analytics servers for processing.

Browser plugin

You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Google's privacy policy: https://policies.google.com/privacy?hl=de.
  • Basis for third-country transfer: EU-US Privacy Shield

Google AdWords and Google Conversion Tracking

We use the Google AdWords service. AdWords is an online advertising program from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not want to participate in tracking, you can object to this use by slightly deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. They will then not be included in the conversion tracking statistics.

More information about Google AdWords and Google conversion tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for third-country transfer: EU-US Privacy Shield

Google Tag Manager

We use the Google Tab Manager service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool for managing cookies, conversion pixels, and tracking codes on our website and allows us to manage and control various codes on our website. These codes are stored in a special container and are not directly integrated into the source code of the page.  

The Google Tag forwards the information collected on our website via cookies to the appropriate tools for further processing. The following types of data can be processed: IP address, browser information, operating system information and information about page views and interactions, such as page views or clicks.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for third-country transfer: EU-US Privacy Shield

Google Maps

We use the map service Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland via an API.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. We have no influence on this data transfer.

Google Maps is used in the interest of presenting our online offerings in an appealing way and making it easy to find the locations we have specified on the website.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for third-country transfer: EU-US Privacy Shield

Google Web Fonts

We use so-called web fonts, which are provided by Google, to uniformly display fonts. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts.

If your browser does not support web fonts, a standard font is used by your computer.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for third-country transfer: EU-US Privacy Shield

Kickscale

Modell Aachen GmbH uses Kickscale in presentations for analysis purposes, a service provided by Kickscale GmbH based in Stella-Klein-Löw-Weg 8, A-1020 Vienna, Austria.

Kickscale is a software solution that we use to analyze various aspects of our presentations before selling. These include:

  • interview analysis of the sales representative and
  • Summary of relevant information.

Each recording requires the consent of the interested party and is queried at the beginning of each presentation. The tool is identified by the participant “notes” in the meeting.  

Data processing is based on your consent (Article 6 (1) (a) GDPR). You can withdraw this consent at any time by unsubscribing from our subscriptions. The legality of the data processing operations already carried out remains unaffected by the revocation.

If recording by Kickscale is generally not desired, storage can be prevented at any time by providing appropriate information. More information about how Kickscale works can be found in Kickscale GmbH's privacy policy.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR

Hotjar

Our website uses the Hotjar web analysis service. The provider is Hotjar Ltd., a European company based in Malta (Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe).

We use Hotjar to better understand the needs of our users and to optimize the offer and experience on this website. With the help of Hotjar technology, movements on the website can be traced. This gives us a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, how far users scroll, etc.) This helps us to tailor our offer to feedback from our users.

Hotjar works with cookies and other technologies to collect data about the behavior of our users and their devices. When using this tool, we pay particular attention to protecting your personal data. In this way, we can only understand which buttons are clicked, the mouse path, how far is scrolled, the screen size, device type, browser information, location (country only), the language preferred to view our website and the IP address of the device (only collected and stored in anonymized form). Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.

You can prevent Hotjar from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your data from being collected when you visit this website in the future: Exclude from tracking.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR

Hubspot

Modell Aachen GmbH uses Hubspot, a service provided by Hubspot Inc., on its websites for analysis purposes. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland

Hubspot is an integrated software solution that covers various aspects of our online marketing. These include: email marketing, reporting, contact management (e.g. user segmentation & CRM) and contact forms.

This uses so-called “web beacons” and also sets “cookies”, which are stored on your computer and allow us to analyze your use of the website. Hubspot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of visit and pages viewed) on behalf of Modell Aachen in order to generate reports about the visit and pages visited by Modell Aachen.

When subscribing to our newsletter or filling out forms, we can also use Hubspot to link a user's visits to Modell Aachen websites with personal information (in particular name/email address) on the basis of consent given, thus recording personal data and informing users individually and specifically about preferred topics.

Data processing is based on your consent (Article 6 (1) (a) GDPR). You can withdraw this consent at any time by unsubscribing from our communications subscriptions. For this purpose, we provide a corresponding link in every email message. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

If collection by Hubspot is generally not desired, the storage of cookies can be prevented at any time by means of appropriate browser settings. More information about how Hubspot works can be found in the Hubspot Inc. Privacy Policy.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for transfer to third countries: EU standard contractual clauses

YouTube

We use the service provider Youtube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our website to integrate videos. In this context, your IP address and various usage data (depending on the type of use) are processed. This can include the following types of data: video views and length of stay, click paths, usage intensity and frequency, information about the devices used (MAC) and software (e.g. operating system) or interactions with content and functions. In addition, inventory data (such as name or contact details) and content data (content such as texts, images or videos) can also be processed if the user shares appropriate data.

  • Legal basis: Consent, Art. 6 (1) (a) GDPR
  • Basis for third-country transfer: EU-US Privacy Shield

Duration of storage of personal data or criteria for storage period

Unless otherwise stated, we delete personal data after storage is no longer necessary to provide our services and no legitimate interests on our part or statutory storage obligations (e.g. Section 147 Tax Code, Section 257 Commercial Code) prevent deletion.

Recipients of data; no unauthorised transfer to third parties

We handle personal data with the utmost care. We only transfer the data to third parties if this is necessary for the execution and processing of established contractual relationships, if you have given us your consent to do so, or if the transfer is otherwise permitted under relevant legal provisions.

We use various service providers as so-called contract processors within the meaning of Art. 28 GDPR, who, like us, are subject to the provisions of European data protection and which we have committed accordingly.

Protection of personal data

Using a bundle of technical and organizational measures in accordance with the latest state of technology, we secure both our website and the data stored in our area of responsibility against loss, destruction, unauthorised access, alteration or publication by unauthorised persons.  

The input and transmission of personal data was encrypted using the SSL method (Secure Socket Layer).

What is SSL?

An SSL-encrypted website transmits personal data to the server in encrypted form so that it is impossible for third parties to intercept or read it. A certificate verifies our identity. Depending on your browser, the green address bar and/or lock can tell you that there is a secure connection. By clicking on the lock or the green address bar, you can read our online identity certificate.

What does SSL do?

By encrypting the transmission, you can assume that your entered data can only be read by us. You can see from the green address bar that you are connected to our server and that it is not a third-party site.

Rights of those affected

You have the following rights vis-à-vis us with regard to personal data concerning you:

  • right to information in accordance with Article 15 of the GDPR,
  • right to correction or deletion in accordance with Article 16 GDPR or Article 17 GDPR,
  • right to restrict processing in accordance with Article 18 GDPR,
  • right to data portability in accordance with Article 20 GDPR,
  • Right to object to processing in accordance with Article 21 GDPR.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data. The competent authority is

State Commissioner for Data Protection of North Rhine-Westphalia
P.O. Box 20 04 44
40102 Dusseldorf
email: poststelle@ldi.nrw.de

Objection to processing; withdrawal of consent

If you have given your consent to process your data, you can withdraw it at any time. Such a withdrawal affects the lawfulness of processing your personal data after you have given it.

Insofar as the processing of your personal data is based on the balancing of interests IN ACCORDANCE WITH ART. 6 para. 1 lit. F GDPR, you can object to the processing. When exercising such an objection, we ask you to explain the reasons why your personal data should not BE processed as completed. In the event of your justified objection, we will review the situation and will either stop or adjust data processing or show you our compelling legitimate reasons for continuing processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time.

You can inform us of your objection using the contact details listed in the responsible person.

Questions and comments; changes to the privacy policy

If you have any questions or comments about data protection, please contact us under the heading “Data Protection”.

The development of the Internet is also having an impact on our data protection strategy. We therefore reserve the right to adapt this privacy policy to the underlying processes at regular intervals. We will inform those affected about any change to the privacy policy via our website.

Data protection in the application process at Modell Aachen GmbH

Below, you will find additional information on the processing of your personal data during the application process at Modell Aachen GmbH. With regard to the mandatory information in accordance with Art. 13 (1) and (2) GDPR, we refer to Part A of this privacy policy.

We offer you the opportunity to apply to us (e.g. by e-mail, post or via online application form). In the following, we will inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure that your data will be processed in accordance with applicable data protection law and all other legal regulations and that your data will be kept strictly confidential.

As part of the application process, we use the service provider EVERYDAY SOFTWARE, S.L., based in Calle Alaba, 61 5º-2ª, 08005, Barcelona, Spain as a processor in accordance with Art. 28 GDPR.

Type, scope and purpose of data collection in the application process

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes during job interviews, etc.) insofar as this is necessary to decide whether to establish an employment relationship. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b in conjunction with Section 26 para. 1 sentence 1 BDSG. Within our company, your personal data will only be shared with people who are involved in processing your application.

If the application is successful, the data you submit will be stored in our data processing systems on the basis of Art. 6 para. 1 sentence 1 lit. b in conjunction with Section 26 para. 1 sentence 1 BDSG for the purpose of carrying out the employment relationship.

Data storage period

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have provided with us for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Article 6 (1) (f) GDPR). The data is then deleted and the physical application documents are destroyed. In particular, storage serves as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has elapsed (e.g. due to an impending or pending legal dispute), it will only be deleted when the purpose for further storage no longer applies. The storage is therefore used in particular for evidence purposes in the event of a legal dispute, see Section 61b (1) ArbGG in conjunction with Section 15 (4) AGG.

Longer storage may also take place if you have given appropriate consent (Art. 6 para. 1 sentence 1 lit. a GDPR) or if legal storage requirements prevent deletion.

Status: 22.07.2024

Ready to take the next step?

Do you have any questions or want to learn more?

Teammeeting Q.wiki Qualitätsmanager im modernen Büro
Write us!

Send us a message. We'll get back to you as soon as possible.

Contact now
Service Mitarbeiter Q.wiki am Laptop
Give us a call!

We are also happy to help you by telephone.

+49 241 9975 310
Q.wiki kennenlernen, Prozesslandkarte auf einem Laptop im Büro dargestellt.
Get to know Q.wiki!

Bundle knowledge and optimize processes collaboratively.

Go to Q.wiki