Privacy policy

We strictly adhere to the provisions of the Bundesdatenschutzgesetz [German Data Protection Act] (“BDSG”) and of the General Data Protection Regulation (“GDPR”) when collecting data. The following declaration is to provide you with an overview of how personal data are handled when you visit our website:

A) Name and address of the controller

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection provisions is:

Address: Verbio SE, Thura Mark 18, 06780 Zörbig
T: +49 (0) 341 308530-0, F: +49 (0) 341 308530-999
E-mail: info@verbio.de / Website: www.verbio.de

B) Name and address of the Data Protection Officer

The Data Protection Officer of the controller is: Daniela Sauter

Address: Verbio SE, Thura Mark 18, 06780 Zörbig
T: +49 (0) 341 308530-295, F: +49 (0) 341 308530-999
E-mail: datenschutz@verbio.de / Website: www.verbio.de

C) General information on how data is processed on this website

1. Scope of the processing of personal data
We process the personal data of our users exclusively to the extent required to provide a functional website as well as our contents and services and/or to improve services by considering the user’s behavior on our website. The personal data of our users is only processed on a regular basis subject to the user’s consent. Exceptions apply when prior consent cannot be retrieved for factual reasons and the processing of data is permitted by law.

2. Legal basis for the processing of personal data
Insofar as we obtain the data subject’s approval for processing activities relating to personal data, Article 6(1) point a GDPR shall serve as legal basis.
Where processing personal data is required to fulfil a contract to which the data subject is party, Article 6(1) point b GDPR shall serve as legal basis. This also applies to processing activities required to take steps prior to entering into a contract.
Where processing personal data is required to fulfil a legal obligation our company is subject to, Article 6(1) point c GDPR shall serve as legal basis.
In case vital interests of the data subjects or of another natural person necessitate a processing of personal data, Article 6(1) point d GDPR shall serve as legal basis.
If the processing is required to protect a legitimate interest of our company or of a third party and if the interests, basic rights and basic freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1) point f GDPR shall serve as legal basis.

3. Erasure of data and retention period
The personal data of the data subjects are deleted or blocked as soon as the purpose for storing them no longer exists. Personal data may be retain beyond such time if required by the European or national legislator in Union regulations, laws or other provisions the controller is subject to. Data are also blocked or deleted in case a retention period dictated by the indicated standards expires, unless it is necessary to keep the data for concluding or fulfilling a contract.

4. Disclosing your data
We do not disclose your personal data to any third parties. Insofar as we are required by law or court order to transfer your personal data, we shall only forward them to the government institutions and authorities with a right to access them pursuant to the statutory provisions.

5. Hyperlinks
Hyperlinks are links to external third-party websites. We provide hyperlinks to you as an additional service. These websites are completely independent and outside of our sphere of influence. We have no influence on the compliance with the statutory data protection provisions of the operators of such websites.

D) Making the website available and creating log files

1. Description and scope of the processing of data
Each time our website is accessed, access data of the accessing computer are saved into an electronic log file, the server log. The data set thus saved contains data such as the IP address of your access, the access date, time and duration. These data are also saved into the log files of our system. These data are not saved with other personal data of the user.

2. Legal basis for the processing of data
The legal basis for temporarily saving the data and creation of log files is Article 6(1) point f GDPR.

3. Purpose of the processing of data
These data are exclusively collected for statistical purposes in order to continually improve the attractiveness, functionality and contents of our website, as well as the security of our IT systems. The data are not transferred to any third parties.

4. Retention period
Data in log files are not saved.

5. Right to object and right to erasure
Recording the data required to make the website available and saving the data into log files is absolutely required for the operation of the website. The user has therefore no right to object.

E) Use of cookies

1. Description and scope of the processing of data
Our website uses cookies. Cookies are text files saved on the computer of the user in and/or by the browser. Whenever a user accesses a website, a cookie can be saved on the user’s operating system. This cookie contains a characteristic string which makes it possible to clearly identify the browser upon accessing the website again. We use cookies to make our website more user-friendly. Several elements of our website make it necessary for the browser to be identifiable even after switching to another page or website. The following data are saved and transmitted in the cookies: Language settings and Login information. You may, however, prevent cookies from being saved by deactivating them or configure your browsers to notify you upon cookies being used.

2. Legal basis for the processing of data
The legal basis for the processing of personal data using cookies required for technical reasons is Article 6(1) point f GDPR.

3. Purpose of the processing of data
The purpose of using cookies required for technical reasons lies in simplifying the use of the website for users. Several functions of our website are unavailable without cookies. These make it necessary for the browser to be identifiable after switching to another page or website. We require cookies for the following applications: Adopting language settings and Remembering search terms. The user data collected by using cookies required for technical reasons are not used for creating user profiles.

4. Retention period, Right to object and right to erasure
Cookies are saved on the user’s computer and transmitted to our website from there. For this reason, you, the user, also have full control over the use of cookies. You can deactivate or limit the transmission of cookies by changing your browser settings. Already saved cookies can be deleted at any time. This may also be done via an automated process. If cookies are deactivated for our website, not all functions of the website may be fully taken advantage of any more.

F) Contact form and email contact

1. Description and scope of the processing of data
Our website contains a contact form which can be used for contacting us electronically. Whenever a user takes advantage of this option, the data entered into the input mask will be transmitted to us and stored.

The following data may be collected when using the contact form and e-mail contact:

IP address of the accessing computer, Date and time of Registration, Title, First name, Last name, Company, Address, Postal code, city/town, Phone, Fax, E-mail address, all information indicated in the message field.

No data are forwarded to any third parties in this connection. The data are exclusively used to process the conversation.

2. Legal basis for the processing of data
The legal basis for the processing of data is Article 6(1) point a GDPR subject to the user’s consent. The legal basis for processing data transmitted within the scope of an e-mail is Article 6(1) point f GDPR. If the e-mail is intended to conclude a contract, the additional legal basis for the processing is established in Article 6(1) point b GDPR.

3. Purpose of the processing of data
The processing of the personal data of the input mask has the exclusive purpose of processing the communication. In case contact is established by e-mail, this also entails the required legitimate interest in the processing of data. The other data processed within the scope of the process of sending a completed contact form or an e-mail only serves to prevent a misuse of the contact form and to safeguard our IT systems.

4. Retention period
The personal data are deleted as soon as they are no longer necessary to fulfil the purpose of their collection. For the personal data contained in the contact form input mask and the personal data sent by e-mail, this is the case as soon as the relevant conversation with the user is over. The conversation is over if the circumstances imply that the matter in question is clarified conclusively.

5. Right to object and right to erasure
The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they may refuse having their personal data saved at any time. All personal data saved within the scope of the communication will be deleted in this case.

G) Matomo

1. Description and scope of the processing of data

On our website we use the open source software tool Matomo to analyse where the user comes from to website and how he surfs on our website. If individual pages of the website are accessed, these data is collected:

Two bytes of the IP address of the accessing system of the user (e.g.: 192.168.xxx.xxx)
Accessed website
The website from which the user arrived at the accessed website (referrer)
Duration of the time spent on the Website
The data will not be passed on to third parties.

2. Legal basis for the processing of data

The legal basis for the processing of the personal data of users is Article 6 (1) point f GDPR.

3. Purpose of the processing of data

The processing of the personal data of users enables us to analyse our users’ surfing habits. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, the interest of the users in the protection of personal data is sufficiently taken into account.

4. Retention period

The data will be deleted as soon as they are no longer needed for our recording purposes.

5. Right to object and right to erasure

You, the user, have full control over the use of cookies. You can deactivate or limit the transmission of cookies by changing the settings of your browser. Already saved cookies can be deleted at any time. This will protect your privacy, but will also prevent the owner from learning from your actions and making it easier for you and other users to use.

Please click the corresponding link to set in your browser a cookie rejecting Matomo statistics:

H) Facebook/Instagram

1. Description and scope of the processing of data

Every visit to the website and every user of the website is recorded, as well as button / link clicks of corresponding job advertisements. For the use of custom audiences for remarketing and retargeting campaigns, the following data is recorded under the applicable data guideline (https://de-de.facebook.com/policy.php).

2. Legal basis for the processing of data

The legal basis for the processing of the personal data of users is Article 6 (1) point f GDPR.

3. Purpose of the processing of data

The processing of the users' personal data enables us to collect the data to evaluate specific campaign performance and to use "Custom Audiences" for remarketing / retargeting campaigns, as well as for optimized campaign management.

4. Retention period

The data will be deleted as soon as they are no longer needed for our recording purposes.

5. Right to object and right to erasure

You can give or withdraw your consent via the cookie settings.

I) LinkedIn

1. Description and scope of the processing of data

We use the LinkedIn Insight Tag for our website. The LinkedIn Insight Tag creates a LinkedIn “browser cookie” which collects the following data: IP address, time stamp, page activities, demographic data from LinkedIn, if the user is an active LinkedIn member.

2. Legal basis for the processing of data

The legal basis for the processing of the personal data of users is Article 6 (1) point f GDPR.

3. Purpose of the processing of data

We process your data in order to evaluate campaigns and to collect information about users of the website who may have reached us through our campaigns on LinkedIn.

4. Retention period

The data will be deleted as soon as they are no longer needed for our recording purposes.

5. Right to object and right to erasure

You can give or withdraw your consent via the cookie settings.

J) YouTube und Google Ads Conversion Tracking

1. Description and scope of the processing of data

We use Google Ads Conversion Tracking for our website. Google Ads Conversion Tracking creates a Google Ads cookie, which collects the following data: IP address, time stamp, page activities, demographic data.

2. Legal basis for the processing of data

The legal basis for the processing of the personal data of users is Article 6 (1) point f GDPR.

3. Purpose of the processing of data

We process your data in order to evaluate campaigns and to collect information about website users who may have reached us through our campaigns with Google Ads Tracking.

4. Retention period

The data will be deleted as soon as they are no longer needed for our recording purposes.

5. Right to object and right to erasure

You can give or withdraw your consent via the cookie settings.

K) Data subject rights

If your personal data are processed, you are a data subject in accordance with the GDPR and BDSG and you have the following rights towards the controller:

1. Right to Access
You may file a request with the controller to receive a confirmation on whether or not personal data relating to you are being processed by us.

If such processing is being done, you may demand access to the following information from the controller:

the purposes for which the personal data are processed
the categories of the personal data being processed
the recipients and/or categories of recipients towards whom the personal data relating to you was disclosed or still will be disclosed
the planned retention period of the personal data relating to you or, if this cannot be specified, criteria for determining the retention period
the existence of a right to have the personal data relating to you rectified or deleted, a right to restrict the processing by the controller or a right to object to such processing
the existence of a right to file an objection with a supervisory authority
all available information about the origin of the data, if such information was not obtained from the data subject
the existence of automated decision-making processes, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
You have the right to request information on whether personal data relating to you are transferred to a third country or to an international organisation. In this connection, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

2. Right to rectification
You have a right to rectification and/or completion towards the controller, provided the personal data relating to you is inaccurate or incomplete. The controller shall rectify the data without delay.

3. Right to restrict the processing
You may request for the processing of the personal data relating to you to be restricted under the following conditions:

if you contest the accuracy of the personal data in question for a period enabling the controller to verify the accuracy of the personal data
the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of the use of personal data instead
the controller no longer needs the data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims or
you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override yours.
If the processing of the personal data relating to you was restricted, such data – except for its storage – may only be processed subject to your consent and to establish, exercise or defend legal claims or to protect the rights of a natural or legal person or on important grounds of the public interest of the Union or a member state. If the restriction of the processing in accordance with the above requirements was restricted, you will be notified by the controller before the restriction is lifted.

4. Right to erasure

Erasure Obligation
You may request that the controller erase the personal data relating to you without delay and the controller shall be obliged to immediately erase such data if one of the following reasons applies:

The personal data relating to you is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing pursuant to Article 6(1) point a or Article 9(2) point a GDPR was based and there is no other legal basis for the processing.
You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
The personal data relating to you have been unlawfully processed.
The erasure of the personal data relating to you is necessary for compliance with a legal obligation pursuant to Union law or member state law to which the controller is subject.
The personal data relating to you have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.

Informing third parties
Where the controller has made the personal data relating to you public and is required to delete them pursuant to Article 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Exceptions
The right to erasure shall not apply to the extent that processing is necessary

for exercising the right of freedom of expression and information
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) GDPR as well as Article 9(3) GDPR
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing or
for the establishment, exercise or defence of legal claims.

5. Right to Information
If you asserted the right to rectification, erasure or restriction of the processing towards the controller, such controller shall notify any and all recipients to whom the personal data relating to you was disclosed of such rectification or erasure of the data or restriction of the processing, unless this is impossible or would involve disproportionate effort. You have the right to be informed of such recipients by the controller.

6. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You moreover have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and
the processing is carried out by automated means.
In exercising your right to data portability, you shall further have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others. The right to data portability right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications. Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, you, on grounds relating to your particular situation, shall have the right to object to processing of personal data concerning you.

8. Right to withdraw consent
You shall have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated individual decision-making including profiling
You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision:

is necessary for entering into, or performance of, a contract between yourself and a data controller
is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests or
is based on your explicit consent.
Decisions shall, however, not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2) point (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of personal data relating to you infringes the GDPR or BDSG. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

L) Inclusion of third-party services and contents

We use third-party content or service offers within the scope of our online offers based on our legitimate interests (i.e. an interest in the analysis, optimisation and economic operation of our online offer within the meaning of Article 6(1) point f GDPR) to integrate such third-party content and services as videos or fonts (hereinafter collectively referred to as “contents”). This always requires that the third-party provider of such contents identifies the user’s IP address, as they are unable to send the contents to their browsers without the ID address. The IP address is therefore required to display these contents. We make an effort to only use such contents provided by operators who only use the IP address to deliver the contents. Third-party providers may furthermore use so-called pixel tags (invisible graphics also known as “web beacons”) for statistical or marketing purposes. Information, such as visitor traffic on the pages of this website, can be analysed by the use “pixel tags”. The pseudonymous information may further be saved in cookies on the user’s device and may contain technical information on the browser and the operating system, referring websites, visit duration and other information of the use of our online offer, as well as be linked to such information from other sources.

The following is an overview of third-party providers and their contents in addition to links to their data privacy statements which contain information on the processing of data and options to object (so-called “opt-out”) as are already similarly mentioned here:

Videos of the platform “YouTube” of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy statement: https://www.google.com/policies/privacy/
Opt-Out: https://www.google.com/settings/ads/