Thank you for your interest in our website.
The protection of your personal data during collection, processing and use on the occasion of your visit to our website is an important concern for us. Your data will be protected within the framework of the statutory provisions. Please take a moment to read the following information. This will inform you about how we handle your personal data, how and for what purpose this data is used, to whom we pass on this data and how we protect your personal data. Your personal rights are our highest priority and we make every effort to protect and safeguard these rights.
The controller for the processing of your personal data within the meaning of the European General Data Protection Regulation (GDPR) is:
PONTON GmbH
Dorotheenstraße 64
22301 Hamburg
Germany
Phone: +49 40 866 275 340
E-Mail: [email protected]
Data Protection Officer
Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.
Logged are:
- Name of the retrieved file,
- date and time of the retrieval,
- amount of data transferred,
- message about successful retrieval,
- operating system used,
- browser and browser type,
- the Internet page from which you were redirected,
- the Internet service provider,
- visited pages and
- requesting domain.
In addition, the IP addresses of the requesting computers are logged. However, the responsible party does not draw any conclusions about a person. This data is only required to display the content of our website correctly, to optimize the content for you on a permanent basis and to support prosecutions in the event of hacker attacks. The data is processed on the basis of our legitimate interest pursuant to Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. The processing of the data is necessary for the operation of the website. The data is stored as long as it is needed to fulfill the purpose and then automatically deleted.
Data subject rights
Pursuant to Article 15 GDPR, you have the right to information about the processing of your personal data. In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, restriction of processing and data portability in accordance with Articles 16-18, 20 GDPR. If you wish to exercise this right, please contact our data protection officer. Furthermore, you have the right to complain to the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer. Furthermore, you have the right to object to the processing of your personal data at any time.
Protection of the stored data
We use technical and organizational security measures in order to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted according to the state of the art. It cannot be ruled out that data transmitted by you without encryption can be viewed by third parties during transmission. We would like to point out that no conclusive guarantee can be given for the security of data transmission via the Internet (e.g. communication by e-mail). Sensitive data should therefore either not be transferred at all or only via a secure connection (SSL) over the Internet.
Rights of affected persons
According to Article 15 GDPR, you have the right to request information about the processing of your personal data. Furthermore, you are free to claim your rights on the correction, deletion or, if deletion is not possible, on the restriction of the processing and on data portability according to Article 16-18, 20 GDPR. If you want to claim this right, please refer to our data protection officer.
Furthermore, you have the right to make complaints at the responsible supervisory authority at any time. Should you think that the processing of your personal data does not take place within the observance of the data protection laws, we kindly ask you to contact our data protection officer.
Furthermore, according to Article 13 (2) lit. b) GDPR, you have the right to contradict the processing of your personal data at any time.
Protection of the stored data
We use technical and organisational security measures to protect your personal data from manipulation, loss, destruction or access by unauthorised persons. Our security measures are continously improved and adapted according to the state-of-the-art. It cannot be excluded that data that you transfer unecrypted cannot be accessed by third parties during transmission. We point out that regarding the data transmission via the Internet (e. g. at the communication by e-mail) no final secure transmission can be guaranteed. Sensitive data should therefore either not be transferred at all or only via a secure connection (SSL) via the Internet.
Protection of minors
Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child is permissible from the age of sixteen in accordance with Article 8 GDPR.
E-Mail contact
On our website, it is possible to contact us via the e-mail address provided. If you take advantage of this option, the personal data transmitted with the e-mail will be stored and processed only for the purpose of handling and responding to your raised and processed. As far as you contact us, you give your consent for the data processing according to Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR. If you are interested in an offer, your personal data will be processed for the purpose of initiating a contract pursuant to Article 6 Paragraph 1 Subparagraph 1 lit. b) GDPR. In case of non-provision, it is unfortunately not possible for us to process your request. An automated decision-making process will not be carried out.
Your personal data will not be passed on to external third parties. A transfer of personal data provided by you to a third country or an international organization does not take place and is not planned.
You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected. Your personal data, which you provide to us, will be stored by us for the duration of the processing of your request until the expiry of the relevant statutory periods.
Cookies
Technically necessary cookies (session cookies)
On our website, we use technical cookies to make the website more user-friendly. In order to use the full functionality of our website, it is therefore necessary for technical reasons to allow session cookies.
The purpose of using such cookies is to enable you to use the website in a simplified and more user-friendly way. It is therefore necessary for the browser to be able to identify you even after you have changed pages.
The data is not used to create a user profile of you. The legal basis for the use of technical cookies is our legitimate interest according to Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. It is not possible to use the website without session cookies.
Cookies for evaluation (tracking cookies)
In addition to the use of technical cookies, tracking cookies are used on this website. Cookies are text files that are stored on your computer and allow an analysis of your use of the website. However, these collect and store data exclusively in pseudonymous form. They are not used to identify you personally and are not merged with data about the bearer of the pseudonym. We use this information to determine the attractiveness of our website and to continuously improve its content. The legal basis for the use of tracking cookies is the consent given by you in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected. You can adjust the cookie settings at any time.
Individual information about the cookies and analytics services used as well as the purpose and legal basis of the data processing are further described in detail in the privacy policy.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google”), which uses cookies. Cookies are text files that are stored on your computer and enable your use of the website to be analysed. Cookies usually transmit the information generated about your use of this website to a Google server in the European Union (EU) or European Economic Area (EEA). However, as this website uses IP anonymisation, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area.
In exceptional cases, the full IP address is transmitted to a Google server in the USA and truncated there. Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Data is only collected as part of this service after you have given your express consent. The legal basis for this is Section 25 (1) TDDDG. You have the right to withdraw your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected. The following data is collected, among other things: client ID, page views, scrolls, outbound clicks, site search, video engagement, file downloads, metadata from the browser, such as city, latitude (of the city), longitude (of the city), minor version of the browser, user agent strings of the browser, device brand, device model, device name, minor version of the operating system, minor version of the platform and screen resolution.
The purpose of the collection is to analyse the use of our website. Furthermore, the use of Google Analytics enables us to create reports on website activities and thus improve our website. In addition to us, Google is to be named as the recipient of the data.
The data is deleted as soon as it is no longer required for our recording purposes. The deletion usually takes place after 2 or 14 months. You can prevent the collection of your data by Google Analytics at any time, even after you have given your consent.
Google’s data transfer to the USA is based on the EU standard contractual clauses, details of which can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
You can find further information at: https://support.google.com/analytics/answer/6004245?hl=de
OpenStreetMap
We incorporate on our website map material from OpenStreetMap (OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands B72 1JU, United Kingdom; hereinafter “OpenStreetMap”), which collects freely usable geodata and holds it in a database for free use.
Any interactions with OpenStreetMap on this website (such as searching by company, region, continent, organizational unit) will connect to the OpenStreetMap Foundation servers and transmit data to the OpenStreetMap Foundation to display embedded maps.
When connecting to display maps, the following data is transmitted to OpenStreetMap servers: IP address, browser and device used, operating system, web page from which you were redirected to the OpenStreetMap Foundation page (referring web page) and the date and time you visited the web page.
If you have a user account with OpenStreetMap and are logged in when you visit our website, the following data is also transmitted to OpenStreetMap’s servers: user ID, E-mail address associated with your account, and content blocked by the user and associated messages.
The collection within the framework of this service is carried out only after your explicit consent has been given. Accordingly, the legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.
You can find more information about OpenStreetMap’s data protection here: https://wiki.osmfoundation.org/wiki/Privacy_Policy
Google Maps
Our website uses Google Maps API (Application Programming Interface) for the visual display of geo-graphical information (location maps). Google Maps is operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”). This enables us to make it easier for you to find us or to point out specific locations.
Google is therefore also to be named as the recipient of the data. When Google Maps is used, information about the use of our website, including your IP address, is transmitted to a Google server in the USA and stored there. This data processing is based on Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR, as the IP address is needed to provide you with the content.
You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.
In this processing, the cooperation with Google is based on a joint responsibility agreement pursuant to Article 26 GDPR. This can be accessed at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.
The transfer of data to the USA is associated with risks under data protection law. If you do not wish the transfer, you can deactivate your consent in the cookie settings. However, we would like to point out that in this case you will not be able to use the map display.
More information about the collection and processing of your data by Google and your rights as a data subject in this regard can be found in Google’s privacy policy at http://www.google.com/policies/privacy/?hl=de and in the additional terms of use for Google Maps and Google Earth at https://www.google.com/intl/de_de/help/terms_maps.html.
Google Fonts
Our website uses Google Fonts for the integration of external fonts, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”). By integrating Google Fonts, a direct connection to Google’s servers is established when you visit our website. The fonts can only be transmitted by Google directly to your browser, which then integrates them into the website. It is possible to have the connections to fonts.googleapis.com blocked by your operating system or a suitable browser add-on. The use of our website might then only be possible to a limited extent. The purpose of the collection is a uniform presentation of fonts and icons, which are offered by Google Fonts. The legal basis is therefore our legitimate interest in the uniform presentation in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. The data is deleted as soon as you leave our website. You can find more information about the collection and processing of your data by Google and your data subject rights in this regard in Google’s privacy policy at http://www.google.com/policies/privacy/?hl=de.
It is possible that personal data will be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the course of using this Google service.
Web Fonts fonts.com or fast.fonts.net:
Our website uses so-called web fonts from Fonts.net for the uniform display of fonts. These are provided by the provider Monotype GmbH (fonts.com or fast.fonts.net). The purpose of the collection is a uniform presentation of fonts and icons offered by Web Fonts. The legal basis is therefore our legitimate interest in the uniform presentation in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. The data is deleted as soon as you leave our website.
Monotype GmbH is located at Heerstraße 30, 61352 Bad Homburg, Germany. By integrating the web fonts, a direct connection to the servers of fonts.com is established when you visit our website. This is the only way that fonts.com can transmit the fonts directly to your browser, which then integrates them into the website. By using fonts.com, information about the use of our website, including your IP address, is transmitted to a server of fonts.com and stored there. You can find more information about web fonts at https://www.fonts.com/info/legal and in the privacy policy of Fonts.com: https://www.fonts.com/info/legal/privacy and in the privacy policy of Monotype GmbH: https://www.monotype.com/legal/privacy-policy.
Google Translate
Our website uses Google Translate, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google”) in order to make the information on our website available to foreign-language visitors as well, since this website is only offered by us in German. By using Google Translate, you consent to the collection, processing and use of data automatically collected during the use of Google Translate, as well as data entered by you, by Google or one of its agents or third-party providers. This consent also forms the basis of the processing under data protection law in accordance with Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.
When using Google Translate, data on the use of the translation functions by the data subject is processed by Google. More information about the collection and processing of your data by Google and your data subject rights in this regard can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
There is a possibility that personal data will be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the course of using this Google service.
Social Media
We would like to get in touch with you and other interested parties, customers and users. We use various social networks for this purpose. You can find out which individual social networks we use in the following section.
However, we would like to point out that we generally have no influence on which data is collected. As a rule, however, this is data that is used for market research and advertising purposes. This is usually done by creating user profiles and the interests determined from them. This makes it possible to display customized advertising to you. Therefore, cookies are also usually set by the use of social networks under certain circumstances.
Furthermore, we would like to point out that your data may also be processed outside the European Union and that you therefore run the risk of not being able to properly enforce your rights.
In principle, we would like to provide you with information or give you the opportunity to share such information in the simplest and quickest way possible. Therefore, unless you have consented to data processing on the respective platform, the legal basis is our legitimate interest pursuant to Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. If you have consented to the respective platform, the legal basis for processing is your consent pursuant to Article 6 Paragraph 1 Subparagraph 1 lit. a) GDPR. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.
We operate a presence on the social network Facebook (Facebook fan page) to interact with Facebook users who visit the fan page. For this Facebook fan page, we have entered into an agreement with Facebook Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland; hereinafter: “Facebook”) as joint controller pursuant to Article 26 of the General Data Protection Regulation (GDPR). The joint responsibility agreement can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
When visiting our Facebook fan page, Facebook collects and processes personal data on the basis of legitimate interest pursuant to Article 6 Paragraph 1 Subparagraph 1 lit. f) GDPR. Part of this data is provided to us in summarized form via the so-called “Insights” (Facebook user statistics). A cookie is stored on the user’s terminal device for this purpose. This serves to be able to use this information again at a later time. The cookie remains active for a period of two years if it is not deleted. Further information from Facebook on the use of cookies can be found in the Facebook cookie policy at https://de-de.facebook.com/policies/cookies/. The transmission of these user statistics takes place exclusively in anonymized form and there is no possibility of access on our part to the underlying data in each case.
Whether Facebook transmits personal data to third parties is beyond our control. It is possible that Facebook Inc., based in the USA, processes personal data outside the European Union.
If you are already logged in to Facebook via your personal user account, the information about your visit to our website is automatically forwarded to Facebook. It is then possible that Facebook assigns the visit to the website to your account. If you do not wish your data to be transmitted and stored by Facebook, please log out of your Facebook account.
We make a presence on the social career network XING. This is an application of XING SE (Dammtorstraße 30, 20354 Hamburg; hereinafter: “XING”). We would like to point out that we have no knowledge of the content of the transmitted data or its use by XING.
We point out that we do not receive knowledge of the content of the transmitted data as well as their use by XING. For more information, please visit: https://www.xing.com/app/share?op=data_protection.
We operate a presence on the social career network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter “LinkedIn”). The link is identified by means of the LinkedIn logo (no LinkedIn plug-in). When you click on the LinkedIn logo, your browser establishes a direct connection with the LinkedIn servers. If you are already logged in to LinkedIn via your personal user account, the information about your visit to our website is automatically forwarded to LinkedIn. It is then possible that LinkedIn assigns the visit to the website to your account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by LinkedIn. The following link leads to the privacy policy of LinkedIn: http://de.linkedin.com/legal/privacy-policy.
We operate a presence on the social network Instagram. This is an application of Facebook Inc. (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland; hereinafter: “Facebook”). We would like to point out that we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please visit: https://help.instagram.com/519522125107875
Kununu
The link to the employer review portal “kununu” included on the website is an application of XING SE (Dammtorstraße 30, 20354 Hamburg, Germany; hereinafter: “XING”). We would like to point out that we have no knowledge of the content of the transmitted data or its use by kununu or XING. For more information, please visit: https://www.kununu.com/de/info/datenschutz.
YouTube (Appearance)
We operate a presence on the YouTube video platform. This is an application of YouTube LLC (901 Cherry Ave, San Bruno, CA 94066 USA; hereinafter: “YouTube”). We would like to point out that we have no knowledge of the content of the transmitted data or its use by YouTube. For more information, please visit: www.google.de/intl/de/policies/privacy/
There is a possibility that personal data will be transferred to the USA in the course of using this Google service.
YouTube (Videos)
The plug-ins from YouTube.de/YouTube.com, which we use on our website, are operated by YouTube (LLC, 901 Cherry Ave, San Bruno, CA 94066 USA), represented by Google Inc. If the plug-ins are called up on our website, a connection to the YouTube servers is established. This results in the transmission of information about which of our websites you have visited to the YouTube server. If you are logged in as a member of YouTube, it is possible for YouTube to assign this information (videos viewed and comments) to your personal user account. You can avoid the collection of your data by logging out. YouTube’s privacy policy can be accessed via: https://www.google.de/intl/de/policies/privacy/.
There is a possibility that personal data will be transferred to the USA in the course of using this Google service.
Online registrations for webinars, events, conferences, etc.
(hereinafter referred to as ‘events’)
All your personal data and other information that you provide us with when registering for our webinars will only be collected and processed for the purpose of registering for these events on the basis of Art. 6 para. 1 subpara. 1 lit. b) GDPR.
Your data will be forwarded to us by email via our provider (Host-Europe, Microsoft). If your data is not provided, we will unfortunately not be able to register you for one of our webinars.
Automated decision-making is not carried out.
This data is transmitted to us as the organiser of the event by the provider in encrypted form. When you register for participation, you will receive further information and reminders by email before and after the webinar.
Your personal registration data will be stored by us for the duration of the contractual relationship and for the duration of the statutory retention period and then deleted or blocked.
Your personal data will not be passed on to external third parties.
A transfer of the personal data provided by you to a third country or an international organisation does not take place and is not planned.
Registration for the sending of information, newsletters etc.
(hereinafter ‘newsletter’)
If you subscribe to our electronic newsletter, your personal data will only be processed for the purpose of regularly sending you our newsletter on the basis of Art. 6 para. 1 subpara. 1 lit. a) GDPR. After registration, we will send you a confirmation email that allows us to verify your identity and reconfirm your consent.
The registration process is logged on the basis of our legitimate interests in accordance with Art. 6 para. 1 subpara. 1 lit. f) GDPR and serves as proof of consent to receive the newsletter.
Your data will be forwarded to us by email via our provider (Host-Europe, Microsoft). If your data is not provided, we will unfortunately not be able to provide you with our newsletter, contact you or process your request. Automated decision-making is not carried out.
Your personal data will not be passed on to external third parties. A transfer of the personal data provided by you to a third country or an international organisation does not take place and is not planned.
You have the right to withdraw your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected.
Your personal data that you provide to us when you subscribe to the newsletter will be stored by us until you withdraw your consent to receive the newsletter and will be removed from the mailing list after you unsubscribe.
