DATA PROTECTION
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to all data with which you can be personally identified. You will find detailed information on the subject of data protection in our privacy policy, detailed below.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the relevant contact details in the legal section of this website.
How are data collected?
On the one hand, your data are collected when you share them with us. These may be data that you enter in a contact form, for example.
Other data are automatically collected by our IT systems when you visit our website. These mainly include technical data (e.g. Internet browser, operating system or time when the page was visited). These data are collected automatically as soon as you enter our website.
What do we use the data for?
Some data are collected in order to ensure the website functions properly. Other data can be used to analyse your user behaviour.
What rights do you have with regard to your data?
You have the right to obtain information about the origin, recipient and purpose of the personal data stored by us free of charge at any time. You also have the right to request the correction, blocking or deletion of these data. Should you have further questions on the subject of data protection, you can contact us at any time at the address given in the section “Legal”. You also have the right to appeal to the competent supervisory authority.
In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. Details can be found in the privacy policy under “Right to restriction of processing”.
Analysis tools and tools from third parties
When you visit our website, your navigation behaviour can be statistically evaluated. This is done primarily with cookies and analysis programs. Your navigation behaviour is usually analysed anonymously; the navigation behaviour cannot be traced back to you.
You may object to this analysis or prevent it by not using certain tools. You will find detailed information about these tools and your rights of revocation in the following data protection statement.
2. General notes and mandatory information
Data protection
The operators of these web pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to data protection legislation as well as according to this privacy policy.
When you use this website, various personal data are collected. Personal data refers to data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that the online transmission of data (such as via email) may be exposed to security gaps. It is impossible to protect data completely against unauthorised access by third parties.
Address of the data controller
The data controller who is responsible for processing data on this website is:
POINT München Werbeagentur GmbH & Co. KG
Konrad-Zuse-Platz 8
D-81829 München
Telephone: +49 89 207042-574
E-Mail: info@pointmuenchen.de
The data controller is the natural or legal person who alone or, together with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Data protection officer as required by law
We have appointed a data protection officer for our company.
POINT WERBEAGENTUR GmbH & Co. KG
Data Protection Officer
Wittelsbacherallee 59
D-32427 Minden
Telephone: +49 571 / 83759-0
E-Mail: datenschutz@pointminden.de
Revoking your consent to data processing
Many data processing processes are only possible with your express consent. You can revoke your previously given consent at any time. To do so, all you need to do is send us an email. Data that has been processed up to the point that the revocation is requested has been processed on legitimate grounds and remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Article 21 of the GDPR)
If the data processing is based on Article 6 para. 1 lit. e or f of the GDPR, you have the right at any time to object to the processing of your personal data for reasons that arise from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. After you exercise your right to object, we shall no longer process your data for these purposes, unless we are able to provide proof of compelling and legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves the purpose of exercising, enforcing or defending of legal claims. (Objection pursuant to Article 21 para. 1 of the GDPR).
If your personal data are processed to operate direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object, your personal data will then no longer be used for the purpose of direct advertising (objection pursuant to Article 21 para. 2 of the GDPR).
Right to appeal to the competent supervisory authority
In the case of violations of the GDPR, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of complaint is without prejudice to any other administrative or judicial remedies.
Right to data portability
In the case of data which we process automatically on the basis of your consent or in fulfilment of a contract, you have the right to have these data handed over to you or to a third party in a common, machine readable format. If you request the data to be transferred directly to another data controller, this will only take place if it is technically feasible.
SSL and TLS encryption
This site uses SSL and TLS encryption respectively for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can check you have an encrypted connection when you see that the browser address field has changed from “http://” to “https://” and when you see the lock symbol in the browser address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion and correction
Within the scope of the applicable legal provisions, you have the right at any time to obtain information free of charge concerning the personal data we have stored about you. You also have the right to know the origin of the data, who is receiving them and for what purpose the data are being processed. If necessary, you also have the right to have these data corrected, blocked or deleted. Should you have further questions on the subject of personal data, you can contact us at any time at the address provided in the section “Legal”.
Right to restrict processing
You have the right to request the restriction of processing of your personal data. You can contact us about this at any time at the address provided in the section “Legal”. You have the right to restrict the processing of your data in the following circumstances:
- If you dispute the accuracy of the personal data we have stored about you, we usually need time to verify this. For the duration of the verification process, you have the right to request the restriction of processing of your personal data.
- If your personal data have been or are being unlawfully processed, you may request the restriction of data processing instead of their deletion.
- If we no longer require your personal data, however you need them to exercise, defend or enforce legal claims, you have the right to demand that your personal data be restricted instead of being deleted.
- If you have filed an objection pursuant to Article 21 para. 1 of the GDPR, a balance must be made between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
3. Data collection on our website
Cookies
Some of our webpages use “cookies”. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are known as “session cookies”. They are automatically deleted after your visit. Other cookies remain in the memory of your device until you delete them. These cookies make it possible to recognise your browser when you next visit the site.
You can adjust your browser settings so that you are notified about the use of cookies, only allow them in individual cases, accept cookies in certain cases or generally block cookies, and activate the automatic deletion of cookies when you close the browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are set on the basis of Article 6 para. 1 lit. f of the GDPR. The website owner has a legitimate interest in the storing of cookies for the technically correct and optimised delivery of its services. If other cookies (such as those used to analyse your navigation behaviour) are also stored, they will be treated separately in this privacy policy.
Server log files
The provider of the pages automatically collects and stores information in what are known as server log files, which your browser automatically sends to us. This data includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the computer establishing access
- Date and time of the server request
- IP address
These data shall not be combined with data from other sources.
The legal basis for collecting these data is Article 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website – to ensure this, server log files must be recorded.
Inquiries by email, telephone or fax
WIf you contact us by email, telephone or fax, we will store and process your inquiry including all resultant personal data (name, inquiry) in order to handle your issue. We shall not share these data without your consent.
The legal basis for collecting these data is Article 6 para. 1 lit. b GDPR, where your enquiry is in connection with fulfilment of a contract, or is required for execution of pre-contractual activities. In all other cases, processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and/or our entitled interests (Art. 6 Para. 1 lit. f GDPR) as we have an entitled interest in the effective processing of the enquiries received by us.
We shall keep the data you enter in the contact form until you ask us to delete them, you revoke your consent for them to be stored or until the purpose for data storage no longer applies (e.g. after your issue has been processed). Mandatory statutory provisions, especially statutory retention periods, remain unaffected.
4. Analytics and advertising
Google Analytics
This website uses features of the web analysis service, Google Analytics. The service provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses ‘cookies’. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Saving Matomo-Cookies and use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
IP anonymization
We have activated the IP anonymization feature on this website. Your IP address will thus be truncated by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the whole IP address first be transferred to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be associated with other data by Google.
Browser plug-in
You may decline the use of cookies by selecting the appropriate settings in your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent Google from collecting data on your use of the website (including your IP address) generated by the cookie, and also prevent the processing of this data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be created, which will prevent the collection of any of your data when visiting this website in future: Deactivate Google Analytics. .
For further information on how user data is processed, please refer to the Google privacy policy at https://support.google.com/analytics/answer/6004245?hl=en.
Order processing
We have entered into an agreement on contract processing with Google. When using Google Analytics, we fully implement the strict requirements of the German data protection authorities.
Demographic data collection by Google Analytics
This website uses the “Demographics feature” of Google Analytics. As a result, reports can be produced that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data produced by third-parties. This data cannot, however, be attributed to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as outlined in the section “Objection to Data Collection”.
Storage duration
Data stored by Google at a user and event level that are linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. double-click cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found on the link below: https://support.google.com/analytics/answer/7667196?hl=en
5. Newsletter
Newsletter details
If you would like to receive our newsletter, we require a valid email address as well as information which allows us to verify that you are the owner of the email address provided and that you agree to receive this newsletter. No additional data is collected or will only be collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
The processing of the data entered when signing up for our newsletter is exclusively on the basis of your consent (Art. 6 para. 1 lit. a of the GDPR). You may revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time just by clicking the “unsubscribe” link in the newsletter. The legality of data processed before we receive your request is not affected by the revocation.
The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted. Data we have stored for other purposes will remain unaffected.
CleverReach
This website uses the services of CleverReach for sending newsletters. The supplier is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service that helps organise and analyse the sending of newsletters. The data entered by you (e.g. email address) for the purpose of acquiring a newsletter will be saved on the CleverReach servers in Germany or Ireland.
Our newsletters sent via CleverReach make it possible for us to analyse the behaviour of newsletter recipients. In doing so, we can analyse how may recipients opened the newsletter message and how often the link in the newsletter was clicked. With the help of so-called conversion tracking, it is also possible to analyse whether a pre-defined action (e.g. purchase of a product on our website) was carried out once the link in the newsletter was clicked. Further information regarding data analysis by CleverReach newsletters can be found on: https://www.cleverreach.com/en/features/reporting-tracking/.
Data processing takes place on the basis of your consent (Article 6 para. 1 lit. a of the GDPR). You can revoke this consent at any time with effect by unsubscribing from the newsletter. The legality of data processed before we receive your request is not affected by the revocation.
If you do not consent to analysis by CleverReach, you must unsubscribe the newsletter. For this purpose, we provide a link in every newsletter message. Furthermore, you can unsubscribe from the newsletter on the website directly.
The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted from our servers as well as the servers of CleverReach. Data we have stored for other purposes will remain unaffected.
For details, see the privacy policy of CleverReach at: https://www.cleverreach.com/en/data-security/.
Conclusion of a contract via order processing
We have entered into an agreement on contract processing with CleverReach. When using CleverReach, we fully implement the strict requirements of the German data protection authorities.
6. Plugins und Tools
YouTube with enhanced privacy protection
Our website uses plugins from the YouTube website. Operators of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this means that YouTube does not store information about visitors to this site before they watch the video. However, the enhanced privacy mode does not necessarily exclude the sharing of data with YouTube’s partners. So, regardless of whether you watch a video, YouTube connects to the Google DoubleClick network.
If you click on a YouTube video on our website, you will be connected to YouTube’s servers. The YouTube server is then informed about which of our pages you have visited. If you are logged in to your YouTube account, you are allowing YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
In addition, after starting a video, YouTube may store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to our website. This information is used, among other things, to capture video statistics, improve user-friendliness, and prevent fraud. These cookies remain on your device until you delete them.
Where applicable, after a YouTube video is launched, additional data processing operations may be triggered over which we have no control.
YouTube is used in the interests of making our online presence more attractive. This constitutes a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
For further information on data protection at YouTube, please view the provider’s privacy policy at: https://policies.google.com/privacy?hl=en.
Embedded YouTube videos
We incorporate YouTube videos into some of our websites. The operator of the respective plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages with the YouTube plugin, you will be connected to YouTube’s servers. In such a case, YouTube will be notified which pages you are visiting. When you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first.
Should a YouTube video be started, the provider uses cookies, which collect information concerning the user behaviour.
Should you have deactivated the saving of cookies for the Google Ad Program, no cookies will be generated when watching YouTube videos either. However, YouTube deposits non-personal usage information in other cookies. Should you wish to prevent this, you need to block the saving of cookies in the browser.
For further information on data protection at YouTube, please view the provider’s privacy policy at: https://www.google.de/intl/en/policies/privacy/
Google Web Fonts
To ensure that fonts are presented as uniformly as possible, this website uses “web fonts” which are made available by Google. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
To do this, your browser must connect to Google’s servers. As a result, Google learns that our website has been accessed via your IP address. We use Google Web Fonts in order to present our website in a uniform and appealing way. This constitutes a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a default font will be used by your computer.
You can find further information about Google Web Fonts under https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=en.
Google Maps
These web pages uses the Google Maps API cartographic service, which is The service provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use Google Maps, it is necessary to save your IP address. As a general rule, this information is transmitted to a Google server in the USA where it is stored. The provider of this website does not have any influence over the transmission of data.
Further information about the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Google Tag Manager
Google Tag Manager is a solution which we use to manage website tags across a user interface (they enable us to embed Google Analytics and other Google marketing services on our website). The tag manager itself (which manages the tags) does not process users’ personal data. Please refer to the following information on Google services relating to the way users’ personal data is processed. User guidelines: https://www.google.com/intl/en/tagmanager/use-policy.html
7. In-house services
Applications
We give you the opportunity to apply for a position with us (e.g. by email, or post). In the following, we will give you information regarding the scope, purpose and use of your personal data collected as part of the application process. We confirm that collection, processing and use of your data complies with applicable data protection law and all other legal directives, and your data will be treated in strictest confidence.
Scope and purpose of data collection
If you send us an application, we will process the associated personal data (e.g. contact and communication data, application documents, notes made as part of job interviews etc.), where this is required for a decision about justifying an employment relationship. The legal basis for this is § 26 BDSG (new) in accordance with German law (initiation of an employment relationship), Art. 6 Para. 1 lit. b GDPR (general initiation of contract) and – where you have given consent – Art. 6 Para. 1 lit. a GDPR. This consent may be withdrawn at any time. Your personal data will only be passed on to persons within our company, who are involved in processing your application.
If your application is successful, the data you have supplied will be saved in our data processing system based on § 26 BDSG (new) and Art. 6 Para. 1 lit. b GDPR for purposes of executing the employment relationship.
Retention period of the data
If we do not offer you a position, you decline a job offer, withdraw your application, withdraw your consent for data processing or ask us to delete your data, the data you have supplied, including any remaining physical application documents, will be saved or retained for a maximum of 6 months after the end of the application process (retention period) so that the details of the application process can be tracked in the event of a dispute (Art. 6 para. 1 lit. f of the GDPR).
YOU MAY WITHDRAW CONSENT FOR THIS SAVING WHERE YOU HAVE ENTITLED INTERESTS WHICH OUTWEIGH OUR INTERESTS.
After the retention period has expired, the date will be deleted, where there is no legal storage obligation, or there are no other legal grounds for further storage. Where it is evident that it will be necessary to store your data after expiry of the storage period (e.g. due to a threatened or pending legal dispute), the data will only be deleted when is becomes redundant. Other statutory retention periods remain unaffected.
8. Our social media appearances
Data processing via social networks
We have publicly accessible profiles in social networks. The social networks that we personally use can be found below.
Social networks can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content. Visiting our social media sites triggers numerous processing processes relevant to data protection. Specifically:
If you are logged into your social media account and you visit our social media platform, the operator of the social media portal can assign this visit to your user account. Under certain circumstances your personal data can also be gathered if you are not logged in or do not have an account with the respective social media portal. In this case, the data is acquired via cookies that are stored on your end device or by recording your IP address.
With the help of data acquired in this manner, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you will be shown interest-related advertising within and outside the respective social media platforms. Provided you have an account with the respective social network, the interest-related advertising can be shown on all the devices on which you are logged in or were logged in.
Furthermore, please note that we cannot follow all processing operations on the social media platforms. Therefore, depending on the provider other processing operations can be carried out by the operators of the social media portals. Details on this can be found in the terms of use and data protection regulations of the respective social media portals.
Legal basis
Our social media appearances should guarantee a comprehensive presence on the internet. This concerns a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks are based on differing legal bases, which must be stated by the operators of the social networks (e.g. consent pursuant to Art. 6 para. 1 lit. a of the GDPR).
Data controller and assertion of rights
If you visit one of our social media pages (e.g. Twitter), the operator of the social media platform as well as our team will be responsible for the data processing operations triggered by this visit. In principle, you can assert your rights (information, correction, deletion, restricting the processing, data transferability and complaints) both against us and against the operator of the respective social media portal (e.g. Twitter).
Please note that despite joint responsibility with the operators of the social media platforms, we do not have complete influence on the data processing operations of the social media portals. Our possibilities largely depend on the corporate policy of the respective provider.
Storage duration
The data collected directly by us via the social media page will be deleted by our systems as soon as the purpose for the storage of such data is not longer applicable, your request us to delete the data, you revoke your consent to the storage or the reason for the data storage is no longer applicable. Stored cookies remain on your device until you delete them. Mandatory statutory provisions, especially retention periods, remain unaffected.
We have no influence on how long the operators of the social networks save your data for their own purposes. For more detail, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Details on the social networks
We use the Twitter short messaging system. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter is certified under the EU-US Privacy Shield.
You can independently adapt your Twitter privacy settings in your user account. To do so, click on the following link and login: https://twitter.com/personalization.
Details can be found in Twitter’s privacy policy: https://twitter.com/en/privacy.
9. Changes
From time to time it may be necessary to adapt the content of this privacy statement for data collected in the future. Therefore, we reserve the right to change this information at any time. At this point, we will also publish the changed version of the data protection policy Therefore, if you visit us again, you should read through the data protection notice once again.
Last updated February 2019