Thank you for your interest in sum.cumo GmbH. Data protection and privacy is particularly important for the management of sum.cumo GmbH. The internet pages of sum.cumo GmbH can be used without any indication of personal data. Should data collection become necessary and there is no legal basis for processing, we generally obtain the consent of the persons concerned.
The use of personal data, such as the name, address or e-mail address of the persons concerned, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the specific data protection provisions applicable to sum.cumo GmbH. Through this data protection declaration we would like to inform the public about the type, scope and purpose of the personal data we process. Furthermore, interested parties are informed about their rights by means of this data protection declaration.
Sum.cumo GmbH has implemented comprehensive technical and organizational measures to ensure the best possible protection of the processed personal data. Nonetheless, Internet-based data transmissions can always contain security vulnerabilities, so that complete protection cannot be guaranteed. Therefore, each person concerned is free to transfer any personal data that may be required to us by alternative means, e.g. by post or telephone.
1. Terms used
- a) personal data: Personal data are all information that can be uniquely attributed to a natural person ("affected person") and are suitable for identifying them. An identifiable person is a person who can be uniquely identified by linking names, identifiers or the like to other data.
- b) the person concerned: The data subject is the person whose personal data are processed by us.
- c) processing: Processing is any operation involving personal data such as the collection, storage, adaptation and alteration, use, transmission or any other form of provision or linking, deletion and destruction.
- d) restriction of processing: Restriction of processing is the identification of certain personal data with the aim of limiting their future use.
- e) profiling: Profiling refers to the types of automated processing of personal data used for evaluations, analyses and forecasts, e.g. with regard to work performance, economic situation, health or whereabouts of these persons.
- f) pseudonymisation: Pseudonymisation is the processing of personal data without direct identification of the person. This is ensured by means of technical and organisational measures that prevent the aggregation of information that could be used to identify the natural person.
- g) controller responsible for data processing: The controller or controller shall be the natural or legal person, body or other body which, alone or in association with others, decides on the purposes and means of processing personal data.
- h) processor of the order: A processor is a natural or legal person who processes personal data on behalf of the person actually responsible.
- i) recipients: The recipient is the natural or legal person or other entity to which personal data are disclosed. Authorities receiving such data on a legal basis within the framework of an investigation shall not be considered as recipients.
- j) third parties: Third parties shall be any other than the person concerned, the person responsible or the processor.
- k) consent: Consent is an expression of the will to process the data concerning the persons.
2. Name and address of the person responsible
Person responsible according to the applicable data protection regulations:
3. Name and address of the data protection officer
The data protection officer of sum.cumo GmbH is:
Any person concerned may contact the Data Protection Officer directly for all questions relating to data protection.
Cookies contain a so-called cookie ID. This ID can be used to identify an Internet browser when it is used to call up the website again. In the long term, we can evaluate their movements on the website and thus improve them.
You can also deactivate the storage of cookies in your browser. You will find instructions on how to do this in the help section of your browser.
5. Gathering data and information
We collect a number of general data and information with each visit to the site. These general data and information are stored in the log files of the server. This includes browser types and versions, the operating system used, the Internet site visited by our site (referrer), the subpage accessed, the date and time of access, the Internet protocol address (IP address), the Internet service provider and other data and information that are used to avert danger in the event of attacks on our systems.
The sum.cumo GmbH does not draw any conclusions about the person concerned. Rather, this data is used to deliver the content of our site and to optimize advertising for it, to guarantee the functionality of our systems and to support law enforcement agencies in the event of a violation. Only an anonymous statistical evaluation is carried out. The server log files are stored separately from the other data.
6. Deletion and blocking
We process the data of the person concerned only for as long as it is necessary for the stated purpose or if this is required by law.If the purpose of data collection ceases or if the legally prescribed storage period expires, the data will be blocked or deleted.
7. Rights of data subjects
Our data protection officer is available at all times as the first point of contact for exercising the rights listed below. He will initiate all further steps immediately.
- a) right to obtain confirmation/ right to be informed: In order to exercise its right of confirmation of the processing concerned, the data subject may at any time turn to our Data Protection Officer or to any other employee of the controller.
- b) right of access by the data subject: We provide free information at any time about the data stored about a person. We also provide information on the following issues:
- the processing purposes
- the categories of personal data
- the recipients or categories of recipients to whom the personal data have been disclosed, in particular recipients in third countries or international organisations
- where possible, the planned duration for which the data will be stored, or the criteria for determining that duration
- with regard to the right to correct or delete personal data concerning that person or to restrict the processing or the right of opposition to such processing
- with regard to the right of appeal to the competent supervisory authority
- all available information about the origin of the data
- the existence of automated decision-making, including profiling (Articles 22 (1) and (4) of the GDPR) including the logic involved and the scope and impact on the person concerned
- c) right to correction: You have the right to have inaccurate personal data concerning you corrected. Furthermore, you may request the completion of incomplete data.
- d) right to erasure (right to be forgotten): It is their right to have their data stored by us deleted if one of the following reasons applies and processing is not necessary:
- The purpose of the data collection has ceased to exist.
- You revoke your consent in accordance with Article 6 (1)(a) of the GDPR or Article 9 (2)(a) of the GDPR, and there is no other legal basis for processing.
- You file an objection pursuant to Art. 21 para. 1 GDPR and there are no primordial legitimate grounds for processing, or the data subject lodges an objection against processing pursuant to Art. 21 para. 2 GDPR.
- The data have been processed without legal basis.
- The deletion of data is necessary for the fulfilment of a legal obligation.
- The personal data were collected in relation to the information society services offered in accordance with Art. 8 para. 1 GDPR.
- If the data have been published by sum.cumo GmbH, we as the person responsible pursuant to Art. 17 para. 1 GDPR are obliged to delete the personal data, then sum.cumo GmbH takes appropriate measures to inform other persons in charge if necessary.
- e) right to restrict processing: You have the right to restrict the processing of your data under the following conditions:
- You deny the accuracy of the data and allow us sufficient time to verify this.
- Processing is unlawful, but they refuse to delete personal data and instead demand that the use of the data be restricted.
- We no longer need the data for the original purposes, but they do need the data for asserting, exercising or defending legal claims.
- You have lodged an objection against the processing in accordance with Art. 21 para. 1 GDPR and it is still unclear whether our legitimate reasons outweigh their grounds.
- f) right to data portability: You have the right to receive all data stored by us in a common format from us. You also have the right to transmit this data to another person in charge without hindrance by us, provided that the legal basis of the processing is correct (art. 6 par. 1 or art. 9 par. 2 GDPR) and the processing is carried out by means of automated procedures and is not necessary for the fulfilment of a task that is in the public interest or in the exercise of official authority. In addition, you can also arrange for personal data to be transferred directly from us to another person in charge, insofar as this is feasible and insofar as this does not affect the rights and freedoms of others.
- g) right to object: You have the right to object at any time to the processing of your data on the basis of your personal situation, which is carried out on the basis of Art. 6 para. 1 letter e or f GDPR. In this case, we will no longer process your personal data unless we have legitimate grounds for processing that outweigh your interests or the processing serves to enforce legal claims. You have the right to object at any time to the processing of your personal data for advertising purposes and, if applicable, to profiling in connection with such advertising. Depending on their personal situation, they may object to the use of data that could be used by sum. cumo GmbH for scientific research purposes or for other purposes in accordance with Article 89 (1) GDPR, provided that such fulfilment of one is in the public interest.
- h) rights in relation to automated decisions in individual cases including profiling: You may object to the use of your data for the purpose of making automated case-by-case decisions (including profiling), provided that this decision would have legal effect or would otherwise affect them. Insofar as this is necessary for the performance of a contract between them and us, or if this is required by law or expressly approved by us, this right shall not apply. If the decision to fulfil the contract or with its consent is made, sum. cumo GmbH shall take appropriate measures to protect its rights and freedoms. This includes at least the right of sum. cumo GmbH to intervene on the part of a person and to present their position and to challenge the decision.
- i) Right to revoke consent under data protection law: You may revoke your consent to the processing of your personal data at any time.
We collect personal data from applicants for the purpose of carrying out the application procedure. If we conclude an employment contract with the applicant, we store the data for the purpose of carrying out the employment relationship. If no employment contract is concluded, the application documents will be automatically deleted two months after the cancellation if no legitimate interests of sum.cumo GmbH stand in the way of deletion. A legitimate interest would be, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).
9. Use of Facebook
sum.cumo GmbH has integrated components of Facebook on this website. Facebook is a social network for the exchange of pictures, contributions and communication.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the processing of personal data if a data subject lives outside the United States or Canada.
Each time you access one of the individual pages of this website of sum.cumo GmbH, the Internet browser on your computer is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/?locale=en_DE . As part of this process, Facebook will be informed about which specific subpage of our site is visited by you if you are logged in to Facebook at the same time. This applies for the entire duration of your visit to our website. This information is collected by the Facebook component and associated with your Facebook account through Facebook. If you click on one of the Facebook buttons integrated into our site, such as the "Like" button, or leave a comment, Facebook assigns this information to your Facebook account and stores it.
This happens regardless of whether you click on the Facebook component or not. You can prevent this collection and transmission to Facebook by logging out of Facebook before visiting our website.
The data policy published by Facebook is available at de-de.facebook.com/about/privacy/ and provides information about the collection, processing and use of personal data by Facebook. It also explains what settings Facebook offers to protect your privacy.
10. Use of Google Analytics (with anonymization function)
We have integrated the component Google Analytics (with anonymization function) on this page. Google Analytics is a web analytics service. Web analysis involves the collection, collection and evaluation of data on the behaviour of website visitors. Among other things, the web analysis service collects data about which website it came from (referrer), which subpages of the website it accesses or how often and for how long it looks at a subpage. We use this to optimize the site and to analyse the cost-benefit analysis of Internet advertising.
The Google Analytics component is operated by Google Ireland Limited, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
We use the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. This will reduce the IP address of your Internet connection by Google and thus make it anonymous if you access our site from the EU or another country party to the European Economic Area Agreement.
The purpose of the Google Analytics component is to analyse visitor flows on our site. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us that show the activities on our website and to provide other services related to the use of our website.
Google Analytics places a cookie on your computer. By setting the cookie, Google will be able to analyse the use of our site. Each time you access one of the individual pages of this site, your Internet browser is prompted by the Google Analytics component to submit data to Google. As part of this procedure, Google receives information about personal data, such as your IP address, which is used by Google, among other things, to trace the origin of the visitors and clicks and subsequently to enable commission payments.
The cookie is used to store your personal information, such as the access time, the place from which you accessed our site and the frequency of visits to our site by you. Whenever you visit our website, these personal data, including the IP address of the Internet connection used by the person concerned, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass on this personal data collected via the technical procedure to third parties.
As already shown above, you can prevent a cookie and thus also the setting of cookies from permanently contradicting at any time by means of a corresponding setting of the Internet browser used. This browser setting would also prevent Google from setting a cookie on your computer. In addition, a cookie already set by Google Analytics can be deleted at any time via the browser.
11. Use of Google AdWords
We have integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google advertising network. Google AdWords allows an advertiser to define certain keywords that allow advertisers to display an ad in Google's search results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, ads are distributed on topic-relevant websites using an automatic algorithm and in accordance with the previously defined keywords.
Google AdWords is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our site by displaying relevant advertisements on the websites of third parties and in the search engine results of the Google search engine and by displaying third-party advertisements on our website.
If you access our site via a Google ad, a so-called conversion cookie is placed on your computer by Google. A conversion cookie loses its validity after thirty days and is not used for identification purposes. If the cookie is still valid, the conversion cookie will be used to track whether certain sub-pages on our site have been accessed. Through the conversion cookie, both we and Google can track whether you have generated sales or cancelled your visit to our website via an AdWords ad.
The data collected in this way will be used by Google to create visit statistics for our site. These statistics are in turn used by us to determine the total number of users who have been referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ads and to improve our AdWords ads for the future. Neither sum.cumo GmbH nor other advertising customers of Google AdWords receive information from Google that could be used to identify them.
The data is transmitted to and stored by Google in the United States of America. Google may pass on this personal data collected via the technical procedure to third parties.
You can prevent the setting of cookies by our site, as already shown above, at any time by means of an appropriate setting of the browser used and thus permanently contradict the setting of cookies. Such a setting of the browser used would also prevent Google from setting a conversion cookie on your computer. In addition, a cookie already set by Google AdWords can be deleted at any time via the browser.
Furthermore, it is possible for them to object to the interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads from each of the browsers you use and make the desired settings there.
12. Use of Twitter
We have integrated Twitter components on this website. Twitter is a microblogging service on which users can publish tweets (short messages) limited to 280 characters. These short messages are available to everyone. The tweets are also displayed to the followers of the respective user. Followers observe the tweets of a user. In addition, Twitter enables a broader audience to be addressed via hashtags, links or retweets.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
If you call up one of our pages on which a Twitter component (twitter button) is integrated, the browser will automatically download a representation of the corresponding Twitter component on your computer. For more information about the Twitter buttons, please visit about.twitter.com/de/resources/buttons . In the course of this process, Twitter is informed about which subpage of our website is visited by you. The purpose of integrating Twitter is to enable you to distribute the content of our site and increase the number of visitors.
If you are logged in to Twitter at the same time, Twitter recognizes with each visit to our site, during the entire duration of your stay, which concrete subpage of our site you visit. This information is collected and assigned to your account via Twitter. If you press one of the Twitter buttons integrated on our site, the transferred data will be assigned to your user account and saved by Twitter. If you do not wish to submit this information to Twitter, you can prevent it by logging out of your Twitter account before accessing our site.
13. Use of XING
We have integrated XING components on this website. XING is a social network that enables users to connect with business contacts and make new business contacts. The individual users create a personal profile for XING. Companies can create company profiles or post job vacancies on XING.
The operating company of XING is XING AG, Dammtorstraße 30,20354 Hamburg, Germany.
Each time you access one of our pages on which a XING component (XING plug-in) has been integrated, your Internet browser will prompt you to download a representation of the XING component. Further information on the XING plug-ins used can be found at dev.xing.com/plugins . XING thus gets to know which concrete subpage of our site is visited by you.
If you are logged in to XING at the same time, XING recognizes with each visit to our site, during the entire duration of your stay, which specific subpage you visit. This information is collected and assigned to your XING account by XING. If you press one of the integrated XING buttons, for example the "Share"-button, XING assigns this information to your XING user account and saves this personal data. If you do not wish this information to be transmitted to XING, you can prevent it from being transferred by logging out of your XING account before accessing our site.
14. Use of Hotjar
The following information is collected in relation to
- End device and browser of the end user:
IP address of the end device (it is collected and stored in anonymised form, for more details see [https://docs.hotjar.com/v1.0/docs/data-safety-and-security]);
Screen resolution of the end device;
End device type (individual end device identifiers), operating system and browser type;
geographical location (country only);
language preferred when viewing the Hotjar-based website;
- User interactions:
Mouse events (movements, position and clicks).
- Log data:
On a random basis, our servers automatically record information collected from Hotjar-based websites. This data includes:
Geographical location (country only);
language preferred when viewing the web page;
Date and time when website pages were accessed;
Cookies are small files placed on computers or devices by websites for the purpose of logging and improving the functionality of the Hotjar-based website.
Most browsers allow you to choose whether or not to allow cookies. If you do not want cookies placed on your computer, please set your browser preferences to reject all cookies before accessing a Hotjar-based website. Please note that this may make some features of certain Hotjar-based websites unavailable.
For more information on the cookies used by Hotjar, please visit [https://www.hotjar.com/cookies].
Hotjar is committed to ensuring that your privacy rights are respected at all times when sharing your behaviour patterns and other information generated in connection with your visit to the Customer Website.
You can opt out of the collection of your data by Hotjar at any time by visiting [https://www.hotjar.com/opt-out] and clicking on "Disable Hotjar" when visiting a customer website.
15. Use of DoubleClick
We have integrated components of DoubleClick by Google on this website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers.
DoubleClick by Google is operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
DoubleClick by Google transfers data to the DoubleClick server with every impression, click or other activity. Each of these data transfers triggers a cookie request to the browser of the person concerned. If the browser accepts this request, DoubleClick sets a cookie on your computer. What cookies are has already been explained above. The purpose of the cookie is to optimize and display advertising. The cookie is used, among other things, to place and display user-relevant advertising and to create or improve reports on advertising campaigns. Furthermore, the cookie serves to avoid multiple insertions of the same advertisement.
DoubleClick uses a cookie ID that is required to complete the technical process. For example, the cookie ID is required to display an ad in a browser. DoubleClick can also use the cookie ID to track which ads have already been displayed in a browser to avoid duplication. DoubleClick also uses the cookie ID to capture conversions. Conversions are recorded, for example, if a user has previously seen a DoubleClick advertisement and the user subsequently makes a purchase on the advertiser's website using the same Internet browser.
A DoubleClick cookie does not contain any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which the user has already been in contact.
Each time you access one of the individual pages of this website, which is operated by sum.cumo GmbH and on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and billing of commissions. As part of this technical process, Google becomes aware of data that Google also uses to generate commission statements. Among other things, Google can understand that they have clicked certain links on our website.
You can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on your computer. In addition, cookies already set by Google can be deleted at any time via an Internet browser or other software programs.
16. Legal basis
Art. 6 para. 1 letter a GDPR serves sum.cumo GmbH as the legal basis for processing operations in which we obtain your consent for the respective processing purpose. If the processing of personal data is necessary for the performance of a contract to which they are party, as is the case, for example, with regard to processing operations necessary for the provision of a service or consideration, the processing shall be based on Article 6 (1)(b) of the GDPR. This also applies to pre-contractual measures, e.g. inquiries about our services. For the fulfilment of tax obligations, processing is based on Article 6 (1)(c) of the GDPR. If a visitor to our premises were injured, his or her name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. In this case, the processing would be based on Article 6 (1)(d) of the GDPR. Finally, processing operations could be based on Article 6 (1)(f) of the GDPR. This applies in cases in which sum.cumo GmbH or a third party is concerned with the protection of a legitimate interest, provided that their interests, fundamental rights and freedoms do not predominate. See also recital 47 sentence 2 of the GDPR.
17. Legitimate interests
If the processing of data, as mentioned above, is based on Art. 6 para. 1 letter f of the GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of our employees and shareholders.
18. Duration of storage
Our criteria for the storage duration of data are the respective legal retention periods. After the expiry of this period, your data will be deleted or blocked routinely, as long as it is not necessary for the fulfilment or initiation of a contract.
19. Provision of personal data
We would like to inform you that the provision of personal data is partly required by law or may result from contractual regulations. Sometimes it may be necessary to provide us with personal data in order to conclude a contract, which will then be processed by us. Failure to deliver would mean that the contract could not be concluded with you. Before any personal data is provided by you, you must contact our data protection officer. Our data protection officer will then inform you whether the provision of data is required by law or contract, whether there is an obligation to provide the data and what consequences it would have if the data were not made available.
20. Automated decisions
We refrain from automatic decision-making or profiling.