// Data Privacy Statement
BLSG AG is pleased that you have visited this website. In the following, we inform you about the type, scope and purpose of the collection, processing and use of your personal data in connection with the use of our website, as well as when you contact us via the contact details provided.
1. Name and contact details of the responsible person
The responsible party within the meaning of the DSGVO and other national data protection laws of the member states as well as other data protection regulations is the:
2. Collection and storage of personal data as well as type and purpose of their use
2.1. When using our contact form
We offer you the possibility to send a message and request information via the form provided on our website. In doing so, it is necessary to provide a valid e-mail address and your name (surname is sufficient) so that we know from whom the request originates and to be able to answer it.
Additional information (first name, company name, phone number) can be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit. b DSGVO contract performance or implementation of pre-contractual measures at the request of the data subject.
2.2. For inquiries by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this was requested.
The data you send to us by contact request will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.
3. Data sharing
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal data with third parties if:
- you have given your express consent in accordance with Art. 6 (1) a DSGVO,
- the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) (f) DSGVO and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) c DSGVO, as well as
- this is legally permissible and necessary according to Art. 6 para. 1 lit. b DSGVO for the processing of contractual relationships with you.
In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again in order to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
The setting of technically necessary cookies (session cookies), to store user-specific settings, such as the selected language (cookie = wp-wpml_current_language) and provision of dynamic content, is based on the legal basis of legitimate interest according to Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is the provision of a functional and state of the art website to present our services and our company.
For cookies that require your voluntary consent, which can be revoked at any time with effect for the future, the request for consent is made with a cookie banner from Borlabs; see also “Cookie consent with Borlabs cookies” under section 6. Here you can change the consents again: Cookie settings
If obtaining consent is mandatory, the request is made to fulfill a legal obligation on the legal basis of Art. 6 (1) lit. c DSGVO.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. The complete deactivation of cookies may mean that you cannot use all the functions of our website.
5. Analysis tools
5.1. Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time. To do this, call the cookie settings.
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
We have concluded a job processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details on this can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=en
5.2. Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to play advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms have led to the display of our advertisements and how many ads have resulted in corresponding clicks.
The use of Google Ads is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in marketing its service and products as effectively as possible.
5.3. Google Tag Manager
This website uses functions of the Google Tag Manager of the provider Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a solution that allows us to insert analytics on our website. We use Google Tag Manager to analyze the success of our Google Ad Words campaigns.
The integration is based on the legal basis of legitimate interest according to Art. 6 (1) lit. f DSGVO, whereby our legitimate interest is the evaluation of our advertising campaigns. In order to comply with legal requirements (Art. 6 para. 1 lit. c DSGVO), we ask our website visitors for their voluntary consent pursuant to Art. 6 para. 1 lit. a DSGVO, which can be revoked at any time with effect for the future, via the Consent Banner. If you consent to the processing, the processing is carried out on the legal basis of Art. 6 para. 1 lit. a DSGVO “Consent”.
6.1. Cookie consent with Borlabs Cookie
Our website uses the cookie consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection law. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not shared with the Borlabs cookie provider.
The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://borlabs.io/kb/what-information-does-borlabs-cookie-store/
6.2. Yoast SEO
To support the search engine optimization of the site we use the plugin “YOAST SEO”. According to WP-Support (https://wordpress.org/support/topic/yoast-gdpr/), the tool does not store any personal data and is therefore DSGVO-compliant.
7. Forwarding to third party services
7.1.Social Media Buttons
We may have embedded buttons with graphics from Linkedin and Xing on our homepage so that you can find BLSG AG on the social media platforms with one click. In the interest of protecting your data as comprehensively as possible, the buttons are only integrated as links to the corresponding services. This ensures that a data transfer to the respective operator of the social network does not take place without prior activation by you. After clicking the button, you will be redirected to the page of the respective provider and can visit the pages of BLSG AG on the respective platforms, find out about activities and topics related to BLSG AG, comment on them and exchange information with others. Sites of third-party providers are operated exclusively by them. We have no influence on the data and data processing procedures collected there, nor are we aware of the full extent of the data collection, the purposes and the storage periods. For information on the handling of your personal data when using these websites, please refer to the respective data protection provisions of the providers.
The embedded YouTube videos are used within the permitted use by YouTube, which all YouTube users must accept: https://www.youtube.com/t/terms. If you see copyrights violated, please report it directly to YouTube.
8. Data protection during applications and the application process
BLSG AG collects and processes the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail or via a web form located on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
9. Rights of the persons affected
You have the right:
- in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
- in accordance with Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
- in accordance with Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
- to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future;
- to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company for this purpose. Our responsible supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach
Phone: +49 (0) 981/180093–0
Fax: +49 (0) 981/180093–800
10. Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to firstname.lastname@example.org.
11. Data security
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
12. Actuality and change of this data privacy statement
This data privacy statement is currently valid and has the status April 2021.