Data protection
We are very pleased about your interest in our company. Data protection is of a particularly high priority for the management of the itestra GmbH. The use of the Internet pages of the itestra GmbH is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the itestra GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the itestra GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
1. Definitions
The data protection declaration of the itestra GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
In this data protection declaration, we use, inter alia, the following terms:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
2. Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
itestra GmbH
Destouchesstr. 68
80796 München
Phone: +49 89 381570-110
Mail: info@itestra.com
Website: www.itestra.com
3. Collection of general data and information
The website of the itestra GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
There is no merge of these data with other data sources. The basis for data processing is Art. 6(1) lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
4. Contact form
Data, including your contact details, submitted via the contact form will be stored to process your request or to be available for follow-up questions. This information is not shared with third parties.
The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6(1) lit. a GDPR). A revocation of your consent is possible at any time by sending an email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data submitted via the contact form will be stored until you instruct us to delete it, revoke your consent to storage or there is no longer a need to retain your data. Mandatory statutory provisions – especially retention periods – remain unaffected.
5. Data protection for applications and the application procedures
The data controller collects and processes the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents will be deleted after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the deletion. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).
6. Use of Cookies
We use so-called cookies in some areas of our website. These are small text files that are temporarily stored by a website on your hard disk. Cookies do not damage your hard drive and contain no viruses or similar. The cookies used by us do not collect any personal data. We use the information contained in cookies to facilitate the use of our pages and to tailor them to your needs.
If you do not want cookies to be stored on your computer, you can disable the corresponding option in the system settings of your browser. You can delete stored cookies at any time in the system settings of your browser. However, we would like to point out that when the cookies are deactivated, the page can no longer be used to the full extent.
7. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”, text files that are stored on your computer and which allow an analysis of the use of the website by you. The information about your use of this website (including your IP address) generated by the cookie is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to web usage and Internet usage. Google may also transfer this information to third parties, provided this is required by law or if third parties process these data on behalf of Google. Google will in no case associate your IP address with other data from Google. Google Analytics cookies are set on the basis of Art. 6(1) lit. f GDPR.
You can prevent the installation of cookies by setting your browser software accordingly; however, we would point out that in this case you may not be able to fully utilize all the functions of this website. By using this website, you agree to the processing of the data collected by you in the manner described above and for the purposes set out above.
Likewise, you can prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. An opt-out cookie will be set which prevents the collection of your data on future visits of our website. Therefore you can download and install the browser plug-in accessible via this link.
Additional information and Google’s privacy policy can be found on:
User Conditions
Data Privacy and Security
Privacy and Terms
8. Google Web Fonts
This website uses Google Web Fonts provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using these web fonts, we will be able to display you the desired presentation of our website, regardless of the fonts available to you locally. This is done by retrieving Google Web fonts from a Google server in the United States and then transferring your data to Google. This refers to your IP address and the page you visited on our website. The use of Google Web Fonts is based on Art. 6(1) lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website. Google Inc. is certified for the EU-US privacy shield. This privacy agreement aims to ensure compliance with the level of data protection in the EU.
Further information and details about Google Web Fonts can be found on https://fonts.google.com/about#AboutPlace:about and https://policies.google.com/technologies/partner-sites?hl=en
9. Links to LinkedIn, facebook, twitter and Xing
HTML links to LinkedIn, facebook, twitter and Xing are embedded on our website. In order to increase the protection of your data when visiting our website, we do not use plugins of the above mentioned services. The use of an HTML link ensures that no connection is established with the servers of the provider of the respective service when visiting a page on our website. By clicking on one of the HTML links of the services above, a new window in your browser opens and calls up the page of the respective service provider. There you can log in, if necessary after entering your login data.
For further information regarding purpose and scope of the data collection, further processing and use of the data by the providers on their pages, your rights in this regard and your setting options for protecting your privacy, please refer to the privacy policy of the respective provider
https://www.linkedin.com/legal/privacy-policy?_l=en_EN
https://www.facebook.com/policy.php
https://twitter.com/en/privacy
https://www.xing.com/app/share?op=data_protection
10. Security
We take all necessary technical and organizational measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public. In certain cases, your personal data will be encrypted during transmission by the so-called Secure Socket Layer (SSL) technology. If your browser supports SSL, the communication between your computer and our servers is done by using a recognized encryption method.
If you wish to contact us via e-mail outside of the online form, the confidentiality of the transmitted information is not guaranteed. The content of e-mails can be viewed by third parties.
11. Legal basis for the processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Article 6(1) lit. b GDPR. This is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.
If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor was injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Ultimately, processing operations could be based on Article 6(1) lit. f GDPR.
This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
12. The legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.
13. Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.
14. Provision of personal data as statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; possible consequences of failure to provide such data
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded.
15. Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
16. Further information and contacts
You can also assert your claims for information, correction or deletion or for restriction of processing or the exercise of your right of objection as well as the right to data transferability at any time.
You can contact us here in written form. You also have the right to contact the data protection supervisory authority in the event of complaints.
itestra GmbH
Destouchesstraße 68
80796 München
Contact to the data protection officer at itestra GmbH:
Gerhard Smischek (external data protection officer)
security@itestra.de
Phone: +49 89 38 15 70-110