DATA PROTECTION STATEMENT.
Information on data processing according to Art. 13, 14 DSGVO
We are pleased that you are visiting our homepage and thank you for your interest in our company. Handling the data of website visitors, but also of our customers and business partners, is a matter of trust. We attach great importance to the trust you place in us and are therefore committed to handling your data with care and protecting it from misuse.
To ensure that you feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. Therefore, we act in accordance with the applicable legal provisions on the protection of personal data and data security. With these notes on data protection, we would therefore like to inform you about when we store which data and how we use it - naturally in compliance with the applicable legislation.
In particular, we follow the EU General Data Protection Regulation (DSGVO) and the current Federal Data Protection Act (BDSG). When using the Internet, we follow the Telemedia Act (TMG) of the Federal Republic of Germany to protect your personal data. In the following, we explain what information we collect during your visit to our website and how it is used. In addition, we would also like to inform you about how we store and use personal data that we have obtained via other channels.
Name and address of the person responsible
The person responsible within the meaning of the DSGVO and other national data protection laws of the member states and other data protection regulations is the:
SMV Bauprojektsteuerung Ingenieurgesellschaft mbH
Pariser Str. 1
D-10719 Berlin
Phone: +49 (30) 25 42 21-0
Fax: +49 (30) 25 42 21-91
e-mail: smv@smv.com
Name and address of the Data Protection Officer
Mr. Andreas Thurmann
DataSolution Thurmann GbR
Isarstr. 13
D-14974 Ludwigsfelde
Phone: +49 (0) 3378 202513
E-mail: mail@datasolution-thurmann.de
General information on data processing
The scope of processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis. When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfil a legal obligation (statutory provisions), Art. 6 para. 1 lit. c DSGVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.
Data erasure and storage period
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. Data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.
CONTACT FORM / E-MAIL CONTACT
Description and scope of data processing
If there is a contact form on our website, it can be used for electronic contact. If you make use of this option, the data entered in the input mask will be transmitted to us and stored. These data are: First name, surname, e-mail address, subject as well as the request.
Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the personal data transmitted with the e-mail will be stored.
Legal basis for data processing
The legal basis for the processing of the data is firstly our legitimate interest in the processing of the data within the framework of the establishment of contact on the part of the enquirer. If the contact is aimed at the conclusion of a contract, the additional legal basis for processing is in the context of a business initiation relationship or contractual relationship.
Purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.
If the contact involves a pre-contractual relationship (interest), the transmitted data will also be stored in our administration software and used to execute the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.
Possibility to object
You have the option to object to the processing of your data at any time. We have set up the e-mail address datenschutz@smv.com for this purpose. We would like to point out that in the case of an objection, the conversation cannot be continued or we cannot create any offers etc.. All personal data stored in the course of contacting you will be deleted in this case.
SUPPORT, ADVICE AND ADVERTISING OF COMPANY CONTACTS
Description and scope of data processing
For the support, advice and advertising of interested parties and company contacts, we collect and use the contact person (first and last name, telephone number, e-mail address and postal address) in addition to the business partner or potential business partner. We also obtain the information from various sources, either through an enquiry (e-mail or telephone), but also via events, trade fairs or business cards received by our employees.
Legal basis for data processing
The legal basis for processing the data is our legitimate interest in processing the data. If the purpose of contacting us is to conclude a contract, the additional legal basis for processing is the business initiation relationship or contractual relationship.
Purpose of data processing
We use this contact data exclusively for our own purposes and for the needs-based design of our own sales activities or customer relationship management.
Duration of storage
In principle, there is no deletion period. However, if our sales department has not had any contact with the company contact within 3 years, the responsible office will decide whether to delete the contact person of the company contact.
Possibility of objection
As a company contact, you have the option to object to the processing of your data at any time. We have set up the e-mail address datenschutz@smv.com for this purpose. All personal data of the contact person that has been stored for the business partner will be deleted in this case.
APPLICATION IN OUR COMPANY
Description and scope of data processing
We offer you the opportunity to apply for a job or to send us an unsolicited application. You can do this preferably by e-mail or on paper. You can access our job advertisements on our website. If you take advantage of this option, we will store general information and documents about you sent by you in our e-mail programme or network. These data are:
In addition, we may forward your application internally to the responsible head of department. No further disclosure of data to third parties will take place in this context.
Legal basis for data processing
The legal basis for the processing of the data is incidentally the processing for a contract initiation relationship or contractual relationship.
Purpose of data processing
The processing of personal data is solely for the purpose of processing the application.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If we do not recruit you, we will delete all data and documents relating to your application after 6 months at the latest. Should we wish to retain your documents for longer due to your qualifications, we will obtain your permission to do so.
Option to object
You have the option to object to the processing of your data at any time. To do so, please contact us at the following e-mail address: datenschutz@smv.com. Please note that in the event of an objection, the application cannot be completed or the conversation cannot be continued.
PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- Information about the browser type and the version used.
- The user's operating system
- The IP address of the user
- Date and time of access
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
This data is also stored in the log files of our system. This data is not stored together with other personal data of the user. Personal user profiles cannot be created. The stored data is only evaluated for statistical purposes.
Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is the processing to protect our legitimate interest.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing also lies in these purposes.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
USE OF COOKIES
Description and scope of data processing
Cookies are small text files that are sent by us to the browser of your end device when you visit our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing procedures. Detailed information on the cookies used can be found in this data protection declaration.
We use the following cookies:
1. domain
2. name
3. description
4. storage period
1. codepen.io
2. __cf_bm
3. cookie is a cookie required to support Cloudflare Bot Management, which is currently in private beta. As part of our bot management service, this cookie helps manage incoming traffic that meets the criteria of bots.
4. 30 minutes
1. smv.com
2. crumb
3. this cookie is associated with SquareSpace. It is used to ensure a visitor's browser security. by preventing cross-site request forgery (CSRF).
4. session
1. www.smv.com
2. ss_cid
3. this cookie is linked to Squarespace. It collects data such as time spent on the website and website interaction.
4. approx. 2 years
1. www.smv.com
2. ss_cpvisit
3. this cookie is linked to Squarespace. It is used to assign visitors in segments to make website advertising more efficient.
4. 2 years
1. www.smv.com
2. ss_cvisit
3. this cookie is linked to Squarespace. It collects data such as time spent on the website and website interaction.
4. 30 minutes
1. www.smv.com
2. ss_cvr
3. this cookie is linked to Squarespace. It identifies unique visitors and tracks their sessions on the website
4. 2 years
1. www.smv.com
2. ss_cvt
3. information not available
4. 30 minutes
If we use cookies or scripts on our website that allow us to analyse the surfing behaviour of users, we will obtain consent in the Consent Manager. In this way, the following data can be transmitted, for example: Search terms entered, frequency of page views, use of website functions. The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user. When calling up our website, the user is informed about the use of cookies for analysis purposes and his or her consent to the processing of the personal data used in this context is obtained. In this context, a reference to this data protection declaration is also made.
Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is our legitimate interest in data processing. For the use of analysis, tracking or marketing cookies, we will obtain consent before data processing or transfer to third-party providers begins.
Purpose of data processing
The purpose of using technically necessary cookies is to make websites easier for users to use. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.
Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.
Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted to our website by the user. Therefore, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
It is also possible to use our offers without cookies and scripts. You can deactivate the storage of cookies and scripts in your browser, restrict them to certain websites or set your browser to notify you as soon as a cookie is sent. You can also delete cookies from your computer's hard drive at any time.
Comply Consent Manager
We have integrated Comply Consent Manager on our website. Comply Consent Manager is a consent solution by Hendrik Paulo Gaffo & Alexander Riegert GbR, Carl-Bremer-Ring 13, 22179 Hamburg, Germany, which can be used to obtain and document consent to store cookies. Comply Consent Manager uses cookies or other web technologies to recognise users and store consent given or revoked.
Purpose of data processing
The use of the service is based on obtaining the legally required consent to use cookies according to Art. 6 para. 1 lit. c. DSGVO.
Duration of storage, possibility of objection and elimination
The concrete storage period of the processed data cannot be influenced by us, but is determined by Hendrik Paulo Gaffo & Alexander Riegert GbR. Further information can be found in the privacy policy for Comply Consent Manager.
Comply API
We use Comply API from Hendrik Paulo Gaffo & Alexander Riegert GbR, Carl-Bremer-Ring 13, 22179 Hamburg, Germany, to access further services and data from Hendrik Paulo Gaffo & Alexander Riegert GbR. In doing so, a transmission of your IP address to Hendrik Paulo Gaffo & Alexander Riegert GbR takes place. Please note that there is a separate section in this privacy policy for each additional service we use from Hendrik Paulo Gaffo & Alexander Riegert GbR.
Purpose of data processing
The use of Comply API is based on our legitimate interests, i.e. interest in optimising our online offer.
Duration of storage, possibility of objection and elimination
The concrete storage period of the processed data cannot be influenced by us, but is determined by Hendrik Paulo Gaffo & Alexander Riegert GbR. Further information can be found in the privacy policy for Comply API.
Squarespace
Our website was created using the Squarespace website construction system. Squarespace is a service of Squarespace Ireland Ltd. and offers web development technology, web design and layout tools, domain hosting and other applications for marketing and workflow management.
We use Squarespace for, among other things, web hosting and the display of our website. In addition, Squarespace collects statistical data about visits to our website.
The following data is usually transmitted: website accessed, date and time of access, amount of data transmitted, notification of whether an access was successful, browser type and version, the user's operating system, the website previously visited (referrer) and the IP address.
These log data are processed exclusively for the above-mentioned purposes, as well as for maintaining the security, functionality and optimisation of the Squarespace service.
The use of the service is based on our legitimate interests, i.e. interest in a secure and efficient provision, as well as the optimisation of our online offer. If we use analysis techniques, we will separately obtain consent from the visitor.
The specific storage period of the processed data cannot be influenced by us, but is determined by Squarespace Ireland Ltd. Further information can be found in the data protection declaration for Squarespace.
Adobe Typekit
We use Adobe Typekit from Adobe Inc., San Jose, California, US, as a service to provide fonts for our online offering. To obtain these fonts, you connect to Adobe Inc. servers, whereby your IP address is transmitted.
The use of Adobe Typekit is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimisation of our online offer.
The specific storage period of the processed data cannot be influenced by us, but is determined by Adobe Inc. Further information can be found in the privacy policy for Adobe Typekit.
jQuery
We use jQuery CDN to properly deliver content to our website. jQuery CDN is a service provided by jQuery, which acts as a content delivery network (CDN) on our website.
A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of jQuery, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of jQuery CDN.
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer.
The specific storage period of the processed data cannot be influenced by us, but is determined by jQuery. Further information can be found in the privacy policy for jQuery CDN.
RIGHTS OF THE DATA SUBJECT
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
- You have a right to information about the personal data stored about you, about the purposes of the processing, about any transfers to other bodies and about the duration of the storage.
- If data is incorrect or no longer necessary for the purposes for which it was collected, you may request that it be corrected, erased or restricted from processing. Where provided for in the processing procedures, you may also inspect your data yourself and correct it if necessary.
- If grounds for objecting to the processing of your personal data arise from your particular personal situation, you may object to such processing where it is based on a legitimate interest. The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
- If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing or profiling purposes, the personal data concerning you will no longer be processed for these purposes.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
If you have any questions about your rights and how to exercise them, please contact the data controller or our data protection officer.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence or of the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection.
The supervisory authority to which the complaint is lodged will inform you of the status and outcome of your complaint, including the possibility of judicial remedy.
You can find more information on the website of the Federal Commissioner for Data Protection and Freedom of Information. Follow the link.
SECURITY
We use technical and organisational security measures in accordance with Art. 32 DSGVO to protect your data managed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Access to this data is only possible for a few authorised persons and persons with a special obligation to protect data who are involved in the technical, administrative or editorial care of data.
We reserve the right to change, update or amend this privacy policy at any time. Any revised Privacy Policy will only apply to personal data collected or modified after the effective date of the revised Privacy Policy.
Status | May 2021