Data Privacy Information
This data privacy information serves to inform you about our handling of your personal data. To make the processing of your data as transparent as possible, we would like to provide you with the following overview of processing operations. In order to guarantee fair processing, this data privacy information contains general information about our handling of your data as well as information concerning your rights according to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
We will inform you in detail about
- General Information
- Data Processing on our Website
- Data Processing on our Social Media
- Further Data Processing
Senacor Technologies AG is the controller of the data processing (hereinafter referred to as ‘we’ or ‘us’).
I. General Information
If you have any questions or feedback concerning this information or wish to contact us to exercise your rights, please send your enquiry to
Senacor Technologies AG
Düsseldorfer Straße 13
Tel.: +49 (911) 4244 – 0
Fax: +49 (911) 4244 – 100
2. Legal Basis
The legal term ‘personal data’ refers to all information relating to an identified or identifiable human.
We process personal data in compliance with the applicable data protection regulations, in particular the GDPR and the BDSG. We solely process data with legal permission. We process personal data
- solely with your consent (Art. 6 section 1 letter a) GDPR),
- to perform a contract to which you are a party or to take steps at your request prior to entering into a contract (Art. 6 section 1 letter b) GDPR),
- to comply with a legal obligation (Art. 6 section 1 letter c) GDPR) or
- where processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 section 1 letter f) GDPR).
- If you apply for an open position in our company, we will, additionally, process your personal data to decide on whether to hire you (section 26 para. 1 sentence 1 BDSG).
Unless otherwise stated in the following, we will only store your data for as long as required to achieve the intended processing purpose or to fulfil our contractual or statutory obligations. In particular, such statutory retention requirements may result from regulations under commercial or tax law.
4. Recipients of Data
For certain processing activities, we rely on processors. These processing activities include, for example, hosting, maintenance and support of IT systems, order and client management, order processing, accounting, marketing or file and data carrier destruction. A ‘processor’ is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. Processors process data not for their own purposes but solely for the controller and are contractually obliged to implement appropriate technical and organizational measures ensuring data protection.
Apart from that, we may transfer your data to postal and delivery services, our bank, consultants/auditors or the fiscal authority if necessary. If applicable, further recipients are mentioned below.
Should your data be transferred to further recipients, you can find this information under the description of the respective processing activity.
5. Processing in the Exercise of your Rights pursuant to Art. 15 to 22 GDPR
If you exercise your rights pursuant to Art. 15 to 22 GDPR, we process the personal data transferred in order for us to grant you your rights and to acquire proof thereof. Data stored for the purpose of granting you your right of access and for the preparation thereof will only be processed for this purpose and for the purpose of data protection audits. Any further processing is restricted in accordance with Art. 18 GDPR. These processing operations are based on Art. 6 para. 1 letter c) GDPR in conjunction with Art. 15 to 22 GDPR and section 34 para. 2 BDSG.
As the data subject, you are entitled to assert your rights against us. In particular, you have the following rights:
- Pursuant to Art. 15 GDPR and section 34 BDSG, you have the right of access to information confirming whether and, if so, to what extent we are processing personal data concerning you.
- Pursuant to Art. 16 GDPR, you have the right to rectification of your data.
- Pursuant to Art. 17 GDPR and section 35 BDSG, you have the right to erasure of your personal data.
- Pursuant to Art. 18 GDPR, you have the right to require us to restrict the processing of your personal data.
- Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transfer such data to another controller.
- Where you have granted us specific consent to a processing activity, you can withdraw such consent at any time pursuant to Art. 7 para. 3 GDPR. Any such withdrawal of consent shall not affect the lawfulness of processing based on that consent prior to its withdrawal.
- If you are of the view that the processing of your personal data infringes GDPR provisions, you have the right to lodge a complaint with a supervisory authority pursuant to Art.77 GDPR.
7. Right to object
Pursuant to Art. 21 para. 1 GDPR, you have the right to object to processing activities based on Art. 6 para. 1 letter e) or letter f) GDPR on grounds relating to your particular situation. If we process your personal data for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 para. 2 and para. 3 GDPR.
You can contact our data protection officer via the following address:
II. Data processing on our website
During use of our website, we collect information that you provide yourself. We also automatically collect certain information about your use of the site during your visit to the site. In data protection law, the IP address is generally considered personal data. An IP address is assigned to each device connected to the internet by the internet provider so that it can send and receive data.
In the case of purely informative use of our website, general information is collected automatically (i.e. not via registration), which your browser transmits to our server. This includes by default: browser type/-version, operating system used, page called, the previously visited page (referrer URL), IP address, date and time of server request and HTTP status code. The processing is carried out in pursuit of our legitimate interests and is based on Art. 6 para. 1 letter f) GDPR. This processing serves the technical administration and security of the website. The data collected will be deleted after six days unless there is a justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are unable to identify you as a data subject based on the information collected. Art. 15 to 22 GDPR therefore do not apply pursuant to Art. 11 para. 2 GDPR, unless you provide additional information to enable your identification in order to exercise the rights set out in these articles.
Our website contains a contact form through which you can send us messages. The transfer of your data is encrypted. All data fields marked as mandatory must be filled in to process your request. Failure to provide this data will result in us not being able to process your request. The provision of further data is voluntary. Alternatively, you can send us a message via the contact email. We process the data for the purpose of answering your request. The legal basis for the data processing is Art. 6 para. 1 letter b) GDPR.
3. Use of the email address
We may use the email address you provide during registration or ordering to inform you about Senacor’s own similar products and services. The legal basis is Art. 6 para. 1 letter f) GDPR in conjunction with. section 7 para. 3 UWG. You can object to this at any time without incurring transmission costs other than those according to the basic rates. To do so, you can unsubscribe by clicking on an unsubscribe link contained in the mailing or by sending an email to email@example.com.
In addition, for certain inquiries, registrations or orders, you have the option to sign up for marketing emails. A valid email address is required to sign up. To verify the email address, you will first receive a registration email, which you must confirm via a link (double opt-in). When you register, we store the IP address and the date and time of registration. The processing of this data is necessary to be able to prove the verification. The legal basis arises from our legal obligation to provide documentation (Art. 6 para. 1 letter c) in conjunction with. Art. 7 para. 1 GDPR). Further processing is carried out with your consent and is based on the legal basis of Art. 6 para. 1 letter a) GDPR. The consent given can be revoked at any time with effect for the future. To do so, you can unsubscribe by clicking on an unsubscribe link contained in the mailing or by sending an e-mail to firstname.lastname@example.org. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.
5. Consent Management Cookies
This website uses a Consent Management Banner to control cookies. The consent banner enables users of our website to give consent to certain data processing procedures or to revoke a consent once given. By confirming the ‘I accept’ button or by saving individual cookie settings, you consent to the use of the respective cookies. The legal basis under data protection law is your consent within the meaning of Art. 6 para. 1 letter a) GDPR.
In addition, the banner supports us in being able to provide proof of the declaration of consent. For this purpose, we process information about the declaration of consent and further log data about this declaration. Cookies are also used to collect this data.
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 para. 1 letter c) in conjunction with. Art. 7 para. 1 GDPR).
You can revoke your consent for cookies via the following links:
6. Analysis of our website
a. Google Analytics
We only use Google Analytics with IP anonymization enabled. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transferred by the user’s browser is not merged with other data from Google.
We use Google Universal Analytics. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions in context and analyze long-term interactions.
The data on user actions are stored for a period of 14 months and then automatically deleted. The deletion of data for which the storage period has expired takes place automatically once a month.
We also use the Google Analytics advertising functions (remarketing). This function enables us, in conjunction with the cross-device functions of Google AdWords and Google DoubleClick, to display ads in a more targeted manner and to present users with ads that are tailored to their interests. Via remarketing, users are shown ads and products for which interest has been identified on other websites in the Google network. The function allows us to link advertising target groups created via Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or personal computer). If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account. The aggregation of the collected data in your Google account is based solely on your consent, which you can give or revoke at Google. The legal basis for this processing is Art. 6 para. 1 letter a) GDPR.
For these linked services, data is then collected via Google Analytics for advertising purposes. To support the remarketing function, Google Analytics collects users’ google-authenticated IDs, which are temporarily linked to our Google Analytics data. This is used to define and create target groups for cross-device advertising. For this purpose, further data on user activity is collected via Google cookies for ad specifications and identifiers. Information on the cookies used by Google can be found via https://policies.google.com/technologies/types?hl=de.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 para. 1 letter a) GDPR. You can revoke the storage of cookies via our Consent Management.
When using Google Analytics, a transfer of the processed data to the US-based Google LLC cannot be ruled out.
b. Crazy Egg
Our website uses a tracking tool from Crazy Egg (Crazy Egg Inc., 16220 E. Ridgeview Lane, La Mirada, CA 90638) to record randomly selected individual visits (with anonymized IP address only). This tracking tool allows using cookies to evaluate in which way you use the website (e.g. which content is clicked on). For this purpose, a user profile is displayed visually. When using the tool, no personal data is collected, processed or used from you. Crazy Egg is used with your consent. The legal basis for this processing is Art. 6 para. 1 letter a) GDPR. You can revoke your consent via our consent management.
When using Crazy Egg, a transfer of the processed data to the US-based Crazy Egg Inc. cannot be ruled out.
When you visit our jobs page at https://jobs.senacor.com/jobs, the following cookies are set there by the service Talention (TFI GmbH, Ohligsmühle 3, 42103 Wuppertal, Germany):
|tmss||Anonymized session identifier to determine number of visits or respectively to differentiate between returning and new visitors||1 hour|
|tmsu||Anonymized user ID to differentiate between different visitors.||1 year renewed with every visit|
|tmsx||Recording of the first page hit during the session and the HTTP referrer to analyze the effectiveness of advertising measures and channels||1 year|
The cookies are set with your consent, which is requested by a consent tool when the website is called up. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 para. 1 letter a) GDPR. You can revoke the storage of cookies via our Consent Management.
7. Tracking and Retargeting
a. Facebook Pixel
On our website, we use the Facebook pixel by Facebook Inc. (USA), or if you are a resident of the EU, Facebook Ireland Ltd. (Ireland/EU) (‘Facebook’).
The Facebook pixel is triggered by Facebook when you visit our website and can save a so-called cookie, i.e. a small file, on your device. This will allow us to perform various functions, which we describe in detail below.
If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is still anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes.
This processing activity is done for the purpose of obtaining information about the effectiveness of the Facebook ads. It takes place exclusively with your consent and is based on Art. 6 para. 1 letter a) GDPR. You can revoke your consent via our cookie management.
You can also object to the collection by the Facebook pixel and the use of your data for the display of Facebook ads additionally at the following address: https://www.facebook.com/settings?tab=ads.
b. Microsoft Bing Ads
We use the conversion and tracking tool Bing Ads of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, ‘Microsoft’) on our website. In doing so, Microsoft stores a cookie on the user’s computer in order to enable an analysis of the use of our website. The prerequisite for this is that the user has reached our website via an advertisement from Microsoft Bing Ads. In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously determined target page. We only learn the total number of users who clicked on a Bing ad and were then redirected to the target page (conversions). No IP addresses are stored. No further personal information about the identity of the user is communicated.
The legal basis for the use and associated storage of cookies is your consent pursuant to Art. 6 para. 1 letter a) GDPR. You can revoke your consent via our consent management.
With Microsoft Bing Ads, a transfer of the processed data to Microsoft Corp. based in the USA cannot be ruled out by us.
c. Twitter Conversion Tracking
We use the conversion tracking by Twitter Inc. on our website. (1355 Market Street #900San Francisco, California 94103, ‘Twitter’). In doing so, Twitter stores a cookie on the user’s computer to enable an analysis of the use of our website. Twitter’s conversion tracking allows us to track the actions users have taken after viewing ads or interacting with ads on Twitter. Twitter’s conversion tracking enables the attribution of conversions such as link clicks, retweets or likes.
The legal basis for the use and associated storage of cookies is your consent pursuant to Art. 6 para. 1 letter a) GDPR. You can revoke your consent via our consent management.
With Twitter conversion tracking, we rule out the transfer of processed data to Twitter Inc. based in the USA.
8. Integrated services and third-party content
We use services, services and content (hereinafter collectively referred to as ‘content’) provided by third-party providers on our website. For such implementation, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transferred to the respective third-party providers. This data processing is carried out in each case to protect our legitimate interests in the optimization and economic operation of our website and is based on Art. 6 para. 1 letter f) GDPR. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is, for example, the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website.
We have implemented content from the following services provided by third-party providers into our website:
Services by Google Ireland Limited (Ireland/EU):
- Google Web Fonts to display fonts;
- Google reCAPTCHA to check whether data is entered by a natural person.
When using Google services, a transmission of the processed data to the US-based Google LLC (USA) by us cannot be ruled out.
III. Data processing on our Social Media
We operate company pages on multiple social media platforms via which we want to inform on our company and create opportunities for customers to connect. We operate company pages on the following social media platforms:
Visiting a company page on social media can result in your personal data being processed. The information in your social media account constitutes personal data. This also encompasses messages and statements made with the account. Additionally, certain information about your visit to a company page is often collected automatically during your visit which may also be personal data.
- Data Processing during the Visit of a Social Media Page
Certain information about you is processed relating to your visit to our Facebook page on which we present our company or individual products. Facebook Ireland Ltd (Ireland/EU – ‘Facebook’) is the sole controller of this processing. Further information about the processing of personal data by Facebook is available via https://www.facebook.com/privacy/explanation.
Facebook provides the opportunity to object to certain processing activities; corresponding information and opt-out-methods are available via https://www.facebook.com/settings?tab=ads.
Facebook provides us with anonymised statistics and insights for our Facebook page, which enable us to gain knowledge about the ways in which people interact with our page (so called ‘insights’). These insights are created based on certain information about persons who have visited our page. Facebook and we are joint controllers of this processing. The processing serves our legitimate interest in evaluating the ways in which people interact with our page and improving our page based on this. This finds its legal basis in Art. 6 section 1 letter f) GDPR. It is impossible to match the information obtained via insights to individual accounts which interact with our Facebook page. We have concluded an agreement with Facebook on joint controllership in which the data protection duties are allocated between Facebook and us. Details of the processing of personal data for the creation of insights and of the agreement we concluded with Facebook are available via https://www.facebook.com/legal/terms/information_about_page_insights_data. Regarding these processing activities, you may also exercise your rights (see above ‘Your Rights’) against Facebook directly. Further information is available in Facebook’s privacy statement via https://www.facebook.com/privacy/explanation.
Please note that user data is also processed in the USA and other third countries according to Facebook’s data protection guidelines. Facebook only transfers user data to countries for which the European Commission has made an adequacy decision pursuant to Art. 45 GDPR or based on appropriate safeguards pursuant to Art. 46 GDPR.
- LinkedIn Company Page
Generally, the LinkedIn Ireland Unlimited Company (Ireland/EU – ‘LinkedIn’) is the sole controller of the processing of your personal data relating to a visit to our LinkedIn page. Further information about LinkedIn processing personal data is available at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
If you visit or follow our LinkedIn company page, LinkedIn processes personal data to provide us with anonymised statistics and insights which enable us to gain knowledge about the ways in which interact with our page (so called ‘insights’). For this purpose, LinkedIn processes, in particular, such data that you already shared with LinkedIn by adding it to your profile like, for example, position, country, field of work, seniority, company size and employment status. Further, LinkedIn collects information on how you interact with our LinkedIn company page, for example whether you follow our LinkedIn company page. LinkedIn does not share personal data with us by providing us with the insights. We only have access to a summarized version of the insights. Also, we are unable to make conclusions about individual members from the information in the insights. LinkedIn and we are joint controllers of the processing regard the page insights. The processing serves our legitimate interest in analysing the ways in which people interact with our page and improving our page based on this. This finds its legal basis in Art. 6 para. 1 letter f) GDPR. We have concluded an agreement with LinkedIn on joint controllership in which the data protection duties are allocated between LinkedIn and us. The agreement is available via https://legal.linkedin.com/pages-joint-controller-addendum. The agreement stipulates the following:
- LinkedIn enables you to exercise your rights pursuant to the GDPR. In order to do so, you can contact LinkedIn online via (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) or via the contact details in the data protection guidelines. You can contact the Data Protection Officer of LinkedIn Ireland via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You can also reach out to us via the contact details mentioned above for the exercise of your rights relating to the processing of your personal data for insights. In such a case, we will forward your request to LinkedIn.
- LinkedIn and we have agreed that the Irish data protection commission shall be the responsible supervisory authority monitoring the processing for insights. You always have the right to lodge a complaint with the Irish data protection commission (see dataprotection.ie) or any other supervisory authority.
Please note that user data is also processed in the USA and other third countries according to LinkedIn’s data protection guidelines. LinkedIn only transfers user data to countries for which the European Commission has made an adequacy decision pursuant to Art. 45 GDPR or based on appropriate safeguards pursuant to Art. 46 GDPR.
Generally, Twitter Inc. (USA) is the sole controller of the processing of your personal data relating to your visit to our Twitter account. Further information on the processing of personal data by Twitter Inc. is available via https://twitter.com/de/privacy.
Generally, the New Work SE (Germany/EU) is the sole controller of the processing of your personal data relating to your visit to our Xing profile. Further information on the processing of personal data by New Work SE is available via https://privacy.xing.com/de/datenschutzerklaerung.
Generally, Google Ireland Limited (Ireland/EU) is the sole controller of the processing of your personal data relating to your visit to our YouTube channel. Further information on the processing of personal data by YouTube and Google Ireland Limited is available via https://policies.google.com/privacy.
Generally, New Work SE (Germany/EU) is the sole controller of the processing of your personal data relating to your visit to our YouTube channel. Further information on the processing of personal data by New Work SE is available via https://privacy.xing.com/de/datenschutzerklaerung.
- Processing of data which you have shared with us via our company pages
Additionally, we process information which you provide us with via the respective social media platform. Such information can include the username, contact details or a message to us. Generally, we only process this personal data if we have expressly requested you to share this data with us like, for example, in connection with a survey. We are the sole controller of such processing activities.
We process this data in pursuit of our legitimate interest to reach out to persons submitting requests. The legal basis for this is Art. 6 para. 1 letter f) GDPR.
Additionally, we might process such data shared with us for purposes of evaluation or marketing. Such processing is based on Art. 6 para. 1 letter f) GDPR and serve our legitimate interest to develop our product range and inform you about our product range. Further data processing can take place if you have consented (Art. 6 para. 1 letter a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 para. 1 letter c) GDPR).
IV. Further data processing
1. Contact via Email
If you send us a message via our contact email address, we will process the transferred data in order to process the request. We process this data in pursuit of our legitimate interest to reach out to persons submitting requests. The legal basis for this is Art. 6 para. 1 letter f) GDPR.
2. Contractual relationship
In order to establish and execute the contractual relationship with our customers, suppliers and business partners it is regularly necessary to process the master, contract and payment data provided to us. The legal basis for this processing activity is Art. 6 para. 1 letter f) GDPR. If we process personal data of our contact persons at commercial customers, suppliers and business partners in the course of this, this happens in pursuit of our legitimate interests and is based on Art. 6 section 1 letter f) GDPR. In addition, we process customer and potential customer data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 section 1 letter f) GDPR and serves our interest in further developing our product range and informing you specifically about products by us. Further data processing can take place if you have consented (Art. 6 section 1 letter a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 section 1 letter c) GDPR).
We publish job advertisements via our website. As a user of the website, you can apply to us for a specific job posting or submit a speculative application. For this purpose, we collect personal data from you, including in particular your name, CV, letter of application and other content provided by you. For the selection of our applications, we use a service provider who is bound by instructions in accordance with the legal requirements for processing on behalf of the controller.
Your personal application data are processed exclusively for purposes related to your interest in current or future employment with us and the review of your application. Your application will only be processed and acknowledged by the responsible contact person. All employees entrusted with data processing are obliged to maintain the confidentiality of your data.
If we are unable to offer you a position, we will retain the data you provide for up to six months for the purpose of potentially answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of presenting evidence or if you have expressly consented to longer storage.
Legal basis for the data processing is section 26 para. 1 BDSG. If we keep your applicant data for a period of six months and you have expressly consented to this, we would like to point out that this consent can be freely withdrawn at any time in accordance with Art. 7 section 3 GDPR. Please direct your revocation to: email@example.com. Such a withdrawal of consent does not affect the lawfulness of the processing, which has taken place prior to the withdrawal.
If you have incurred costs as a result of traveling to the interview, which you request reimbursement of, we process your data on the legal basis of Art. 6 para. 1 letter c) GDPR. Invoices in connection with the reimbursement of travel expenses are archived in accordance with the requirements of tax law.
4. Membership in the Talent-Pool
When you join our Talent-Pool, you enable us to maintain contact with you for your further career path. You will receive regular career news, invitations and information about professional and career events as well as special job offers. A valid email address is required to join the Talent-Pool. If you register for this at an event, we process personal data such as your email address and name on the basis of the consent you have given. The processing is based on Art. 6 para. 1 letter a) GDPR.
If you decide to join the Talent-Pool following an application, we use the inventory data you provided during the application process. In addition, we receive the information about the campaign/ad via which you came to us. This processing is also based on your consent pursuant to Art. 6 para. 1 letter a) GDPR. You can revoke your consent at any time with effect for the future, for example by sending an email to firstname.lastname@example.org or by contacting us via the channels mentioned above. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.