Privacy notice

Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions with regard to all processing of personal data on this website is:

kfgn | Site Operations & Services GmbH

Hoheluftchaussee 18

20253 Hamburg

Deutschland

Tel.: 040 / 460 76 30

E-Mail: info@kfgn.de

The data protection officer of kfgn | Site Operations & Services GmbH is:

Herr Ingo Wolff

tacticx GmbH

Walbecker Straße 53

47608 Geldern

E-Mail: datenschutz@kfgn.de

The website www.kfgn.de is a service of kfgn | Site Operations & Services GmbH (hereinafter referred to as “we” or “us” or “kfgn”). For further information please visit: https://www.kfgn.de.

The distinction between female and male personal designations was deliberately omitted for reasons of better legibility.

1.Data processing on our website

In this chapter you will find information on which of your personal data we process and how it is processed when you visit our website www.kfgn.de and as far as you use the functions and contents we offer you. We process your personal data only to the extent necessary to provide a functional website and to provide and optimize our content and services.

1.1 Processing of personal data when accessing our website

The following data will be processed when you access our website:

IP address of the user
browser used (type, version, language)
used operating system
Internet service provider of the user
Date and time of access to our web pages
Files retrieved from our website
The website from which the user accessed our website.
Website that the user accesses through our websites.

The processing and temporary storage of the IP address is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must be stored for the duration of the session. The log files contain IP addresses or other data that enable the user to be identified. The data is stored and processed in log files on the basis of Art. 6 para. 1 lit. b, f GDPR in order to ensure the functionality of the website. In addition, the data is used to optimize our website and to ensure the security of our information technology systems. The aforementioned purposes also constitute our legitimate interests in the processing of your data. Any processing of personal data will be carried out exclusively for the purposes stated and to the extent necessary to achieve these purposes. The above data will not be used for advertising, customer consulting or market research purposes.

1.2 Contact

If you contact us (e.g. by contact form, telephone or e-mail) we process the personal data you provide to us for the purpose of answering your enquiries and for individual communication. The disclosure of this data by the user is expressly on a voluntary basis. We therefore use the information stored by us on the basis of Art. 6 para. 1 lit. b GDPR to process your request and on the basis of Art. 6 para. 1 lit. f GDPR for purposes of customer care and possibly market research (anonymous, internal evaluation of the user structure). Our legitimate interest lies in designing our services to meet user’s needs and promoting user and customer satisfaction. Your data will be deleted after final processing of your request, provided that there are no legal obligations to store the deletion.

1.3 Job Application

We may use our website to inform you about vacancies in our company. If you apply for a job, we will process your personal data, which you transmit to us within the scope of your application, on the basis of Art. 6 Para. 1 lit. b and c GDPR as well as § 26 BDSG (German Federal Data Protection Act) solely for the processing of your application. We will treat your data as strictly confidential in accordance with the statutory provisions.

Your personal data will be accessible to the respective employees responsible for the application process. Your personal data is required for the application. If you do not provide us with this data, you cannot apply to us.

If you do not arrange for your data to be deleted, your data will remain stored for a maximum of six months after completion of the application process. If we wish to retain your application for longer because your profile could correspond to a job that will only be advertised in the future, we will ask for your written consent.

If you are hired as a result of an application, your data will always be stored for the period of the respective contractual relationship.

1.4 Cookies

We may use several cookies on our website. When a user visits one of our websites, a cookie may be stored on the user’s operating system. A cookie contains a characteristic string of characters that uniquely identifies the browser when the user visits our website again. The following data is stored and transmitted in the cookies:

language settings
log-in information

The processing of personal data using cookies is based on Art. 6 para. 1 lit. f GDPR. The purpose of using cookies lies in the user-friendly design of our websites; therein also lies our legitimate interest in the processing of your personal data. Cookies are stored on the user’s computer and transmitted from there to our websites. Users can deactivate or restrict the transmission of cookies by changing the settings of their Internet browser. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our web pages, it is possible that all functions of our web pages can no longer be used to their full extent.

You must select a cookie when you visit our website. Below you will find an explanation of the various options and their meaning: to be used:

Allow all cookies: Any cookie such as tracking and analytical cookies.
Only allow first party cookies: Only cookies from this website.
Do not allow cookies: No cookies will be set unless they are technically necessary. (Borlabs Cookie already sets a necessary cookie when a page is called up.)

You can change your cookie setting here:

[borlabs_cookie]

1.5 Google Analytics

Our website uses Google Analytics, a software for the statistical evaluation of user access of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies (see above) to help the website analyze how users use the site. Data processing in this context is based on Art. 6 Para. 1 lit. f GDPR, our legitimate interest lies in improving the quality of our websites and their contents. The web analysis can be technically prevented by the user of the web pages by deactivating JavaScript and cookies in his web browser. Details on the settings required for this can be found in the product descriptions or instructions of the various browser providers. Data processing by Google can also be prevented by the user using a browser add-on to deactivate Google Analytics. Further information and the add-on can be found at https://tools.google.com/dlpage/gaoptout?hl=en.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (an appropriate level of data protection results from Google’s participation in the Privacy Shield Framework in accordance with Art. 45 Para. 1 GDPR) and shortened there. Further information on the terms of use and data protection of Google Analytics can be found at

https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/.

1.6 Social Media

On our website, we may make social media plug-ins (“plug-ins”) of the social networks Xing, Facebook, Google+, Twitter and LinkedIn available on the basis of Art. 6 Para. 1 lit. f GDPR. They establish a connection to the respective service provider. Data on the browser behaviour of the user is transmitted to the respective service provider. When users click on one of the plug-ins, personal data (IP address of the user as well as the web address (URL) of the page currently visited by the user, including time and location) is transferred to the respective service provider and processed by the latter. Our legitimate interest in the integration of the services basically consists in the optimisation of the usability and the content for the individual users of our website as well as, if necessary, the networking of our marketing activities with the respective services of the respective providers. Further information on data processing can be found in the data protection information of the respective service providers:

Facebook: https://de-de.facebook.com/policy.php

Xing: https://privacy.xing.com/de/datenschutzerklaerung

Google+: https://policies.google.com/privacy

Twitter: https://twitter.com/de/privacy#update

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE.

Users who are members of the aforementioned social networks and do not want their data to be collected via our websites by the respective social network must log out of their respective social media account before visiting our websites.

If data is transferred to US Facebook, Google, LinkedIn and/or Twitter servers via the integrated plug-ins, an appropriate level of data protection pursuant to Art. 45 Para. 1 GDPR results from the participation of the providers in the Privacy Shield Agreement.

1.7 Data erasure and storage period

The personal data of the persons concerned will be erased or blocked by us as soon as the purpose of storage no longer applies. In the case of data processing for the provision of the web page, the erasure takes place when the respective session has ended. If personal data are stored in log files, they will be erased after seven days at the latest. A storage going beyond this is possible if the IP addresses of the users are deleted or alienated beforehand, so that an assignment of the data is no longer possible.

2. Data Security

Kfgn uses technical and organizational security measures in order to protect the personal data of the users against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments. The details result from the technical and organizational measures described in the directory for processing activities of kfgn.

3. Rights of the data subject

Kfgn processes your personal data, you are the data subject pursuant to Art. 4 No. 1 GDPR with the following rights vis-à-vis kfgn:

3.1 Right of access

Pursuant to Art. 15 GDPR, you may request confirmation from us as to whether personal data relating to you will be processed by us. If we process your personal data, you can request the following information from us:

the purposes of the processing;
the categories of your personal data that we process;
the recipients or categories of recipients to whom we have disclosed or will disclose your personal information;
(where possible) the envisaged period for which we will store your personal information or, if that is not possible, the criteria used to determine that period;
the existence of a right to request rectification or erasure of personal data concerning you, a right to restrict our processing of your personal data or a right to object to such processing;
the right to lodge a complaint with a supervisory authority;
all available information about the origin of the data, provided that the personal data were not collected from you;
the existence of automated decision-making including profiling (Art. 22 para. 1 and 4 GDPR) and – at least in these cases – meaningful information about the logic involved and the scope and envisaged consequences of such processing for you.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

3.2 Right to rectification

Pursuant to Art. 16 GDPR, you have the right to request us to correct and/or complete any incorrect personal data concerning you.

3.3 Right to erasure

In accordance with Art. 17 GDPR, you can demand that we erase your personal data immediately. We are obliged to delete your data immediately if one of the following reasons applies:

Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You withdraw your consent, on which we base the processing pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Art. 21 para. 2 GDPR.
Your personal data have been processed unlawfully.
Your personal data have to be erased for compliance with a legal obligation under Union or Member State law to which we are subject.
Your personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

If we have made your personal data public and we are obliged to erase them in accordance with Art. 17 para. 1 GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to your personal data or copies or replications of your personal data.

The right to erasure does not exist if the processing is necessary

to exercise the right to freedom of expression and information
to fulfil any legal obligation which requires processing by Union or Member State law to which we are subject or to perform any task in the public interest or in the exercise of official authority vested in us;
for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR);
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the aforementioned right to erasure presumably makes the realisation of the objectives of such processing impossible or seriously impairs them,
or to assert, exercise or defend legal claims.

3.4 Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of your personal data pursuant to Art. 18 GDPR:

if you contest the accuracy of your personal data, for a period of time which enables us to verify the accuracy of the personal data;
if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
if we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
if you have objected to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether our legitimate grounds override yours.

If the processing of your personal data has been restricted, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. If the processing restriction has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

3.5 Right to notification

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged pursuant to Art. 19 GDPR to notify all recipients to whom we have disclosed your personal data of this fact, unless this proves impossible or involves disproportionate effort. You have the right to be informed of such recipients.

3.6 Right to data portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without any hindrance from us, provided that

processing is based on consent (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR) or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and
processing is carried out by automated means.

In exercising this right, you also have the right to request that your personal data be transmitted directly by us to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by the right to data portability. The right to data to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in us.

3.7 Right to object

Pursuant to Art. 21 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will not process your personal data subsequently unless we can prove compelling reasons for our processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

3. 8 Right to revoke consent

You have the right, if applicable, to revoke any declarations of consent given to us under data protection law at any time, for example by e-mail to datenschutz@kfgn.de. The revocation of the consent does not affect the legality of the processing, which took place on the basis of the consent up to the revocation.

3,9 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, under Article 77 GDPR you have the right to lodge a complaint a supervisory authority, in particular in the Member State of your place of residence, workplace or place of presumed infringement, if you are of the opinion that the processing of your personal data carried out by us violates the GDPR.

4. Automated decision-making

We do without automatic decision making or profiling.

5. Responsibility for content and information

Our web pages contain links to Internet offers of external providers. The contents of the Internet offers of external providers were checked by us when setting the link to determine whether they violate applicable laws under civil or criminal law. However, it cannot be ruled out that these contents may be changed afterwards by the respective providers. Should you be of the opinion that linked external pages violate applicable law or have other inappropriate content, please let us know. We will check your notice and remove the external link if necessary. kfgn is not responsible for the content and availability of the linked external websites.

6. Scope and validity of the privacy notice

By using our websites you consent to the data processing described above. This privacy notice only applies to the contents of our websites. Other data protection and data security regulations apply to the linked external content. You can find out who is responsible for these offers in the respective imprint.

Due to the further development of our websites or the implementation of new technologies, it may become necessary to amend this privacy notice. We therefore reserve the right to change the privacy notice at any time with effect for the future. The version available at the time of your website visit always applies.

kfgn Privacy Statement kfgn.de V04 22.03.19