Privacy Notice
Data protection notice
We put a high priority on data protection and data security for our customers and users. This is why protecting your personal data in all of our business processes is a special concern to us.
This data protection notice explains which information is collected when you visit our website and how this information is used. However, this notice does not apply to other companies’ websites containing a link to this website nor does it apply to websites to which our website provides links.
Alterric GmbH
Holzweg 87
26605 Aurich
contact@alterric.com
Executive management: Dr. Frank May
Name and address of the data protection officer
The data protection officer for the controller is:
Stephan Toleikis, Thosa-Datenschutz UG (limited liability)
Hans-Böckler-Allee 26
30173 Hannover
E-mail: datenschutz@alterric.com
If you have any questions or suggestions regarding data protection, you can directly contact our data protection officer at any time.
Data processing for visits to our website
Alterric automatically collects data and other information from your computer or device when you visit our website. We will collect the following data:
- the IP address or domain name of the requesting computer
- the time and date of access
- the pages accessed
- your internet provider’s name
- possibly your computer’s operating system and browser software
- the website from which you visit the Alterric website.
This data is collected and processed to ensure the security of our system. Your IP address will be erased within 7 days. Alterric reserves the right to process the data further in an anonymised form.
This data processing complies with Article 6 (1) (f) of the General Data Protection Regulation (GDPR).
Legal basis for processing personal information
Provided that we obtain consent from the data subject to personal data processing operations, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Article 6 (1) (b) of the GDPR serves as the legal basis for processing personal data required to perform a contract to which the data subject is a contracting party. This also applies to processing operations required to take pre-contractual measures.
Provided that it is necessary to process personal data to meet a legal obligation to which our company is subject, Article 6 (1) (c) of the GDPR serves as the legal basis.
In the event that vital interests of a data subject or of another natural person make processing of personal data necessary, Article 6 (1) (d) of the GDPR serves as the legal basis.
If processing is necessary to safeguard a justified interest of our company or of a third party and if the interests, basic rights and basic freedoms of the data subject do not override the above-stated interest, Article 6 (1) (f) of the GDPR serves as the legal basis of processing.
Security measures
Alterric uses extensive technical and organisational security measures to manage and protect your personal data against misuse, accidental or intentional manipulation or against access by unauthorised persons. We continually improve our security procedures according to technological developments.
Online applications
If you apply at Alterric, we will process your personal data for the purpose of handling your application. We will only use your application data for this purpose and in accordance with statutory provisions. We will treat your data confidentially. We will only collect personal data from you that we need for the application process.
Alterric will collect the following data when you apply:
Mandatory fields: your title, first name, family name, e-mail address and telephone number
Voluntary information: your date of birth, address, an alternative telephone number and any application documents submitted
We will erase your data within three months of completing the application process. In any case, you can view, edit or have your data and any supporting documents erased (such as your CV) at any time as part of your online application.
This data processing complies with Article 6 (1) (f) of the GDPR.
Cookies and interest-based advertising (retargeting)
In some areas of the website, Alterric uses “cookie technology” in order to offer exemplary services. Cookies are small text files which are generated by a web server and are stored on your computer through your web browser.
Most of the cookies which Alterric uses will be deleted at the end of your session. Some cookies will remain on your PC even after the end of your session and thus enable Alterric to recognise your PC next time you visit the Alterric website, on the basis of the data stored in the cookie in question (your visit to our website, including the time and date, your browser type, operating system, the products you viewed on the Alterric website). These cookies are known as “ID cookies”. It is not possible to identify you on the basis of the information stored in these cookies. Data is processed in accordance with Art. 6 (1f) GDPR.
In addition, when you visit the Alterric website, third-party cookies will be stored on your computer for purposes of interest-based advertising (retargeting) and web analysis.
This website uses various cookie types. By law, we are permitted to save cookies on your device if these are essential for the functioning of this website. We require your consent for all other cookie types. You can grant it through the consent manager (authorisation survey). No personal data will be transferred until we have your authorisation.
Following your authorisation, this website will use cookies and other tracking tools. We share the data with our partners, including Google and Facebook. In some cases, your data could be transferred to a third country, e.g. the USA. Using clear identifiers such as device IDs, our partners can analyse the use of the website and show you content and ads tailored to your interests.
You can modify or revoke your consent at any point in time through the cookies statement on our website.
Your consent covers the following domain: www.alterric.com
Cookie consent
The pseudonomised cookie is used to store your cookie consent, in which your preferences for cookies are stored. The cookie is necessary for running the website. The provider collects and stores the following data:
- Time and date of consent
- Status and type of consent
Data is processed in accordance with Art. 6 (1f) of the General Data Protection Regulation (GDPR)
Google Analytics
This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses “cookies”, text files that are saved on your computer and that enable analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google server in the United States and saved there. We use the suffix “gat._anonymizelp” for web analysis via Google Analytics. Google uses this suffix to truncate or anonymise the IP address of the internet connection if our website is accessed from a member state of the European Union or other contracting states to the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the United States and truncated there in exceptional cases. The IP address is not merged with other Google data in this context. Google will analyse this information on behalf of the website operator to create reports about website activities and to perform other associated services for the website operator on the basis of website activity. Cookies are automatically erased after a duration of 14 months.
Data processing for using Google Analytics is in compliance with Article 6 (1) (a) of the GDPR and is in compliance with your consent according to Article 45 (1) (a) of the GDPR for personal data processing operations outside of the EU/EEA (third countries including the United States).
Recipients/categories of recipients: Google is the recipient of the collected data. Transmission to third countries: Personal data is transmitted to the United States based on the current Standard Contractual Clauses (SCC) that were made available by a decision of the EU Commission and that should ensure a corresponding level of data protection between the involved parties provided that the clauses are used without essential changes. Transmission is made by consent in compliance with Article 45 (1) (a) of the GDPR in cases where the Standard Contractual Clauses (SCC) do not satisfy the specifications of the GDPR.
You can prevent cookies from being saved by changing the preferences of their browser software accordingly. However, we would like to point out to you that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the data generated by the cookie and related to your use of the website (including your IP address) from being collected by Google and then processed by Google by downloading and installing the browser Plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information and Google’s applicable data protection policies at https://www.google.de/intl/de/policies/privacy/ or https://www.google.com/analytics/terms/de.html.
Google Maps
On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive maps to visually display geographic information. Our location is shown to you by using this service in case you decide to visit our location.
If you access the subpages into which Google Maps are integrated, it does not transfer information about your use of our website (such as your IP address) to a Google server and save it there. Information is only transmitted to Google when you explicitly access Google Maps by clicking on them, and then information may be transmitted to a server of Google LLC in the United States. This takes place regardless of whether Google provides a user account by which you are logged in and regardless of whether a user account exists. When you are logged into Google, your data is classified directly to your account. If you do not want classification with your profile by Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as a user profile and evaluates the profiles. Collection, retention and evaluating takes place in compliance with Article 6 (1) (f) of the GDPR on the basis of Google’s justified interest in displaying personalised advertising, market research and/or needs-based design of Google websites. You are entitled to a right to object to these user profiles being created, and you must contact Google to exercise this right.
For cases where personal data is transmitted to Google LLC with its headquarters in the United States, Google LLC has accepted the updated Standard Contractual Clauses (SCCs) of the European Commission, which should guarantee compliance with the level of data protection applicable in the EU.
Google’s terms of service can be viewed at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html. On Google’s website, you can find detailed information about data protection related to the use of Google Maps (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.
Your rights
If Alterric processes personal data related to your person, we will provide you information about the categories of affected data, the purposes of use, any recipients or categories of recipients of data and about the duration of the planned retention if you request this information.
You have the right to demand that any incorrect or incomplete data be rectified or supplemented.
If data processing takes place because of consent that you have given, you have the right at any time to withdraw your consent with future effect. If data processing takes place based on Alterric’s justified interests, you have the right to object to the data processing for reasons that are based on your special situation (Article 21 of the GDPR).
Under certain circumstances, you have the right to demand that your data be erased. This especially applies in cases where the data is no longer required for data processing, you have withdrawn consent that was given or you objected to the data processing because of your special situation.
Under certain circumstances, you can demand restriction of your personal data, if erasure is not possible or if the obligation to erase is disputed.
Furthermore, you have a right to data portability. This means that we provide your data to you in a machine-readable format upon request.
You have the right to contact the competent supervisory authorities with a complaint. The Federal Commissioner for Data Protection and Freedom of Information is competent for telecommunication services. The State Commissioner for Data Protection in Lower Saxony is competent for all other concerns.
Persons to whom Alterric transfers data
Alterric transmits your data to processors in compliance with Article 28 of the GDPR. The processor only processes your data in compliance with the law and according to Alterric’s instructions. Alterric is responsible for how data processors process the data. Alterric may transmit your data to cooperation partners for service performance. This takes place either as permitted by law or if you have given us your consent to do so. Furthermore, we are obliged to transmit your data to public authorities in certain cases.
Data transfer to third countries
We transmit some personal data to a third country outside of the EU such as to Google or Facebook and other third parties in the United States. The European Court of Justice evaluates the United States as a country with an insufficient level of data protection according to EU standards. There is especially the risk that your data could be processed by US authorities for purposes of monitoring and surveillance and possibly even without means of redress. You can actively consent to this transmission via our website using our cookie management. You may withdraw this consent at any time.
This data processing complies with Article 49 (1) (1) (a) of the GDPR.
Existence of automated decision-making in individual cases (including profiling)
We do not utilise any purely automated decision-making procedures in compliance with Article 22 of the GDPR. If we would utilise such a procedure in the future in individual cases, we would specifically inform you about this if required to do so by law.
Privacy policy for using social media Plug-ins (no like buttons)
Our website uses social Plug-ins (“Plug-ins”; only forwarding, no “Like” button) from the social networks LinkedIn, Twitter and XING.
Your browser only creates a direct connection to the servers of a social network if you activate the Plug-ins by clicking and thus give your consent to data transmission. The content of a Plug-in is directly transmitted to your browser and integrated into the site. The Plug-in then transmits data (including your IP address) to the social network. We have no influence on the amount of data that the social network collects by means of the Plug-ins. To our knowledge, social networks definitely receive information about which of our webpages you are currently accessing and have previously accessed. By integrating Plug-ins, social networks also receive information that your browser has accessed the associated page of our web presence if you do not have a profile with the social network or are not logged in at the time. This information (including your IP address) is directly transmitted by your browser to a server of the social network (and is also transmitted into the United States) and is saved there. If you interact with the Plug-ins, the associated information is also directly transmitted to a server of the social network and is saved there. The information is also published by the social network, and your contact data is displayed.
Please see the following privacy policies for the purpose and scope of data collection and further processing and for the use of the data by the social network as well as your associated rights and settings to protect your privacy ……
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Twitter: https://twitter.com/de/privacy
XING: https://privacy.xing.com/de/datenschutzerklaerung
No Plug-ins are integrated into our website that are provided by the social networks LinkedIn, Twitter or XING. There is no automatic transfer on our website of user data to the operators of these platforms.
Our social buttons only create direct contact between networks and users if a user actively clicks on one of the buttons.
As a user, you can post the contents of this website in social networks without complete surf profiles being created by the operators of these networks.
Making contact
If you have a concern or a request, you can contact us via our contact form.
Alterric will collect the following data if you make contact:
your title, first name, family name, telephone number (voluntary information), e-mail address and your concern.
The data will be processed for purposes of handling your concern and responding to it. The data will be erased depending on your concern.
This data processing complies with Article 6 (1) (f) of the GDPR.