We
TEAMS Design Hamburg GmbH
Gertigstraße 10a, 22303 Hamburg, Germany
Phone:+49 40 4929395-0
E-mail: [email protected]
and
TEAMS DESIGN GmbH
Kollwitzstraße 1, 73728 Esslingen, Germany
Phone: +49 711 3517650
E-mail: [email protected]
are responsible within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations.
Our data protection officer is:
Klaus Baumgartner
Hans-Peter Aglassinger
I. Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The IP address of the user
- Date and time of access
- Websites that are accessed by the user's system via our website
- Website that redirected you to our site (referrer URL)
The data is stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the collection and temporary storage of data is Art. 6 para. 1 lit. f GDPR.
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, we use the data for the technical optimization of the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
II. Use of cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
1. Use of technically necessary and analysis cookies
We use cookies to ensure that our website functions properly. Some elements of our website require that the accessing browser can be identified even after a page change.
When accessing our website, the user is informed about the use of cookies and, in the case of cookies that are not technically necessary, his or her consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this Privacy Policy.
The use of technically necessary cookies and similar technologies in the "technically necessary" category is based on Section 25 (2) No. 2 TTDSG. Subsequent data processing is carried out on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.
The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the storage of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
We also use third-party cookies on our website. The legal basis for the use of cookies and the subsequent data processing is your consent in accordance with Section 25 (1) TTDSG and Art. 6 para. 1 lit. a GDPR. In detail, the following cookie-based tools are used:
a) Google Analytics
If you have given your consent, the web analysis service Google Analytics 4 is used on this website. The controller is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behavior is recorded in the form of "Events". Events can be:
- Page views
- First visit to the website
- Start of the session
- Your "click path", interaction with the website
- Scrolls (whenever a user scrolls to the end of the page (90%))
- Clicks on external links
- Internal search queries
- Interaction with videos
- File downloads
- Viewed / clicked ads
- Language setting
Also recorded:
- Your approximate location (region)
- Your IP address (in abbreviated form)
- Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- Your Internet provider
- The referrer URL (via which website/advertising medium you came to this website)
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.
Recipients of the data may be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
The data sent by us and linked to cookies is automatically deleted after 14 months[BT1] at the latest. Data that has reached the end of its retention period is automatically deleted once a month.
b) Meta pixel
If you give your consent, we use functions of the Meta-Pixel service from Meta Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If you do not give your consent, we will not allow Meta Pixel cookies.
The functions of the meta pixel make it possible to track the behavior of site visitors after they have been redirected to the provider's website by clicking on a Facebook or Instagram ad ("conversion tracking"). The following data can be collected:
Information about the actions and activities of visitors to our website, such as searching for and viewing a product or purchasing a product;
Specific pixel information such as the pixel ID and the meta cookie
Information about the buttons clicked by visitors to the website
Information on the status of deactivation/restriction of ad tracking
Information contained in the HTTP header such as IP addresses, web browser information, page location and referrer
Advertising IDs of devices.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta Ireland so that a connection to the respective user profile on Facebook is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Usage Policy. This enables Meta to place advertisements on Facebook pages, but also outside of Facebook. As the website operator, we have no influence on this use of the data.
The collection and transfer of event data is carried out by us and Meta Ireland as joint controllers. We have entered into a Joint Controller Agreement with Meta Ireland which sets out the allocation of data protection obligations between us and Meta Ireland. In this agreement, we and Meta Ireland have agreed, among other things, that we are responsible for providing you with all information under Articles 13, 14 GDPR regarding the joint processing of personal data and that Meta Ireland is responsible for enforcing the rights of data subjects under Articles 15 to 20 GDPR in relation to personal data held by Meta Ireland following the joint processing.
Meta Ireland is responsible for the further processing of the transmitted event data. For more information about Meta's use of data, settings and opt-out options, please refer to Meta's privacy policy (https://www.facebook.com/privacy/policy/?subpage=1.subpage.4-InformationFromPartnersVendors) and the settings for the display of advertisements by Meta.
Meta Ireland also uses the Event Data to report on the impact of our advertising campaigns and other online content and to gain analysis and insights about users and their use of our website, products and services. For this purpose, we transfer personal data contained in the Event Data to Meta Ireland. The transferred personal data is processed by Facebook Ireland as our processor.
The purpose of data processing is to evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising measures.
The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Meta server in the USA, Meta Platforms, Inc., Deborah Crawford 1601 Willow Road Menlo Park, California 94025, and stored there.
The data sent by us and linked to cookies are automatically deleted after no later than 14 months.
c) LinkedIn Insight Tag
We use the LinkedIn Insight Tag service from the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
The service provider sets and processes cookies:
- URL
- Referrer URL
- Device properties
- Browser properties and
- IP address.
We do not receive any personal data from LinkedIn, but only summarized reports on the demographics of our target group and the performance of our ads. This includes the following information on criteria such as:
- Industry
- Job title
- Company size
- Career level
- Location
The purpose of the processing is the analysis of LinkedIn members on a website in order to optimize the offers and the performance of advertising campaigns on LinkedIn.
The information generated by the cookies about the use of the online offer by the user can be transmitted to a server of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA and stored there.
LinkedIn anonymizes the data within 7 days. The data will be deleted within 90 days.
2. Revocation of consent and objection
You can withdraw your consent at any time with effect for the future by visiting Cookie settings[BT1] again and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites.
You can also prevent the collection of the data generated by the cookie and related to your use of the website to the respective provider and the processing of this data by not giving your consent to the setting of the cookie or by declaring your objection under the following exemplary links:
- http://tools.google.com/dlpage/gaoptout?hl=de
- https://marketingplatform.google.com/about/analytics/terms/de/
- https://www.linkedin.com/uas/login?session_redirect=https%3A%2F%2Fwww.linkedin.com%2Fpsettings%2Fadvertising
Further information on data protection and the cookies used by the respective provider can be found on the respective provider website, in particular at:
- https://policies.google.com/?hl=de
- https://de.linkedin.com/legal/privacy-policy
- https://de-de.facebook.com/privacy/policy/
The provision of the data is not required by law or contract or necessary for the conclusion of a contract. You are under no obligation to provide the data.
3. Data transfers to third countries
Where the aforementioned tracking services process data outside the EU or the EEA and there is no level of data protection corresponding to the European standard, our service providers have concluded EU standard contractual clauses with their service provider to establish an appropriate level of data protection. If our service provider is based in a third country, we have concluded EU standard contractual clauses for the protection of personal data directly with the service provider. An adequacy decision has been issued by the EU Commission for the USA and applies to companies that are certified under the Data Privacy Framework. A level of data protection comparable to that in the EU applies to the transfer of data. These include the providers LinkedIn Corporation, Google LLC and Meta Platforms, Inc. For the other providers, there is currently no level of data protection comparable to that in the EU. We have taken the aforementioned measures here.
III. Contact form, contact by e-mail and job applications
There is a contact form on our website which can be used to contact us electronically, as well as a form for applications for advertised vacancies. The data you enter in the respective form will be transmitted to us and stored. It is mandatory to provide your contact details (e-mail address or telephone number) and, in the case of job applications, your first name and surname, while all other information is voluntary. If you contact us by e-mail, we will process all the data you provide in your e-mail.
The legal basis for the processing of data in the context of contact inquiries and applications is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in responding to your inquiry or, in the case of an inquiry based on or to initiate a contractual relationship, Art. 6 para. 1 lit. b GDPR. In the case of legitimate interest, our interest outweighs the interest of the user, as we assume that the user is interested in processing their request.
We process your contact data solely for the purpose of processing the contact request or application.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the information in your request, this is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified, in the case of applications in particular after completion of the application process, at the latest after six months.
If we receive application documents and other personal data from you via our website for the purpose of applying for a position at TEAMS Design Shanghai, China or TEAMS Design Chicago, USA, we only collect this data as a processor and on the instructions of the respective foreign company and forward it to the respective company for the purpose of carrying out the application process. Please also note the further information in this regard under "V. Recipients".
IV Social media presence
1. LinkedIn
We use the platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter "LinkedIn"). We would like to point out that you use our LinkedIn page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
We are only jointly responsible with LinkedIn for the processing of so-called "Insights data" insofar as this data is used for the creation of so-called "Page Insights". We have concluded an agreement with LinkedIn in the context of joint responsibility, which you can access at https://legal.linkedin.com/pages-joint-controller-addendum. The agreement relates to data processing that is collected in connection with a visit to or interaction with our LinkedIn profile, but only insofar as this data is also (subsequently) processed for "Page Insights". "Page Insights" include analysis services that help the operator of a LinkedIn profile to better understand interactions with your pages. The purpose of data processing is to create aggregated statistics for LinkedIn profile operators. LinkedIn provides more information on this here: https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=en. The information available to data subjects on data for "Page Insights" indicates how and when "Insights data" is collected and used to create "Page Insights":
- When a LinkedIn member visits, follows or engages with the site, LinkedIn processes personal data to provide the site operator with insights into usage.
- LinkedIn processes data that the member has provided to LinkedIn, such as data on function, country, industry, seniority, company size and employment status from a member's profile.
- LinkedIn processes information about how a member has interacted with your company page, e.g. whether a member is a follower.
When you visit our LinkedIn page, LinkedIn collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the LinkedIn page, with statistical information about the use of the LinkedIn page. We do not receive any personal data from LinkedIn in this context.
The data collected about you in this context will be processed by LinkedIn and may be transferred to countries outside the European Union. LinkedIn describes what information LinkedIn receives and how it is used in its user agreement and privacy policy. Further information can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy. If you wish to exercise a data subject right to which you are entitled under the GDPR, we would like to point out that we cannot fully comply with these rights without LinkedIn. With regard to the processing of LinkedIn, we ask you to contact LinkedIn directly. The respective responsibilities, in particular with regard to safeguarding the rights of data subjects, can be found in the Page Insights Addendum. LinkedIn assumes primary responsibility for fulfilling the GDPR obligations for the joint processing of "Insights data". This includes the fulfillment of the following data subject rights. LinkedIn provides further details on the exercise of these rights in its privacy policy under point 4.
We are also solely responsible for certain data processing. We process the following data for communication with LinkedIn users in order to offer our information service:
- User interactions (postings, likes, etc.)
- Profile name and data provided by the user in the course of the conversation, e.g. for processing inquiries
- Statistical surveys on target group advertising
The processing is carried out for the purpose of answering your inquiries or communicating with you and to publish information about our events and services.
The legal basis for processing for the purpose of responding to inquiries that serve to conclude a future contract is Art. 6 para. 1 lit. b GDPR, in other cases our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
The legitimate interest consists in the effective provision of information for users, customers and interested parties and communication with these persons as well as our external presentation.
Insofar as personal data is transferred to LinkedIn servers in the USA and stored and processed there, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland has concluded the standard data protection clauses of the EU Commission with the LinkedIn companies based in the USA, which permit the transfer of personal data to the USA in individual cases.
Once your request has been dealt with, the personal data you have provided will be deleted from our systems. If you interact with us publicly, for example by leaving a comment or "liking" a post, this data will remain publicly accessible on the site until you or we delete it. If statutory retention obligations require longer storage, your data will only be stored for this purpose and blocked for other purposes.
2. Instagram and Facebook
We would like to point out that you use our Instagram and Facebook pages and their functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
We and Meta Platforms Ireland Limited, 4 Grad Canal Square, Dublin 2, Ireland (hereinafter "Meta") as the provider of Instagram and Facebook are jointly responsible for the processing of personal data via our profile ("Insights data"). The joint controllership agreement is available at: https://www.facebook.com/legal/terms/page_controller_addendum.
According to the agreement, Meta is responsible for informing the data subjects about the processing. Instagram's and Facebook's privacy policy is available at: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect and https://de-de.facebook.com/privacy/policy/ respectively. Data subjects may assert their rights against any of the data controllers, us and/or Meta.
We are also solely responsible for certain data processing. We process the following data for communication with users in order to offer our information service:
- User interactions (postings, likes, etc.)
- Profile name and data provided by the user in the course of the conversation, e.g. for processing inquiries
The processing is carried out for the purpose of answering your inquiries or communicating with you and to publish information about events and services from us.
The legal basis for processing for the purpose of responding to inquiries that serve to conclude a future contract is Art. 6 para. 1 lit. b GDPR, in other cases our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
The legitimate interest consists in the effective provision of information for users, customers and interested parties and communication with these persons as well as our external presentation.
Meta sometimes transfers personal data to Meta servers in the USA. This data is stored and processed there. An adequacy decision has been issued by the EU Commission for the USA and applies to companies that are certified under the Data Privacy Framework. Meta has been certified. A level of data protection comparable to that in the EU applies to the transfer of data.
Once your request has been dealt with, the personal data you have provided will be deleted from our systems. If you interact with us publicly, for example by leaving a comment or "liking" a post, this data will remain publicly accessible on the site until you or we delete it. If statutory retention obligations require longer storage, your data will only be stored for this purpose and blocked for other purposes.
3. X (formerly Twitter)
We use the short message service of X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. We would like to point out that you use the X short message service and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. sharing, commenting).
The data collected about you when you use the service is processed by X Corp. and may be transferred to countries outside the European Union. This includes your IP address, the application used, information about the device you are using (including device ID and application ID), information about websites accessed, your location and your mobile phone provider. This data is assigned to the data of your X account or your X profile. We have no influence on the type and scope of the data processed by X, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by X and for what purposes it is used can be found in X's privacy policy (https://twitter.com/privacy?lang=de ) and via the option to view your own data at X (https://help.twitter.com/de/managing-your-account/accessing-your-twitter-data).
As the provider of the information service, we also collect and process data from your use of our short messaging service: responses to our messages and interactions with our website in order to respond to you or react to your interaction. The legal basis for this is Art. 6 para. 1 lit. f GDPR. You have the option of restricting the processing of your data in the general settings of your X account and under "Data protection and security".
V. Recipients
Within our company, access to your data is granted to those departments that absolutely need it to achieve the purpose for which it was collected.
We, TEAMS Design Hamburg GmbH and TEAMS DESIGN GmbH, process the personal data listed in this Privacy Policy together as joint controllers. For this purpose, we have concluded a joint controller agreement.
In the agreement, we have agreed, among other things, that TEAMS Design Hamburg GmbH is responsible for providing you with all information in accordance with Art. 13, 14 GDPR on the joint processing of personal data and for processing the asserted rights of the data subjects in accordance with Articles 15 to 20 GDPR with regard to personal data.
When using our website, your personal data may be transferred outside the European Economic Area (EEA) to TEAMS Design USA, 1812 W. Hubbard St., Suite 200, Chicago, IL 60622, United States and TEAMS Design Shanghai, 735 Liyang Rd, Office 5301, 200080 Shanghai, China. Such processing will only take place for the purpose of processing applications for (job) vacancies in relation to the Chicago and Shanghai offices.
In the USA and China, the level of data protection does not meet the requirements of the GDPR. We have therefore provided suitable guarantees. To this end, we have concluded standard contractual clauses of the European Commission and taken further measures to protect personal data.
VI. Rights of the data subject
In accordance with Art. 15 para. 1 GDPR, you have the right to request information free of charge about the personal data we have stored about you. In addition, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR) of your personal data.
If the data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object in accordance with Art. 21 GDPR. If you object to data processing, this will not take place in the future unless the controller can demonstrate compelling legitimate grounds for further processing which override the data subject's interest in objecting. If the data processing is based on consent in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing.
In the aforementioned cases, please contact us in writing or by e-mail using the contact details given above.
You also have the right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority of the federal state in which you live or in which the controller has its registered office is responsible.
VII. Automated decision-making/profiling
We do not carry out automated decision-making or profiling (an automated analysis of your personal circumstances).
VIII. Amendment of this Privacy Policy
As a result of the further development of our website and offers on it or due to changed legal or official requirements, it may be necessary for us to change this Privacy Policy. The version available on our website is valid at any given time.