Introduction
This privacy policy clarifies the nature, scope and purpose of the collection and use of personal data on the website www.beeline-group.com (hereinafter referred to as the “Website”) by beeline GmbH (hereinafter “we” or “us” or “beeline”). We are responsible for the processing of personal data on this website, unless this privacy policy contains different information.
Personal data is information that can be used to help identify a person, i.e. information that can be traced back to a person. This typically includes your name, email address or phone number. In addition, however, purely technical data that can be assigned to a person can be regarded as personal data.
Contact details of the data controller:
beeline GmbH
Grünstraße 1
51063 Cologne
Contact details of the data protection officer
Our external privacy protection officer can be reached at the following e-mail address: datenschutz.beeline@two-towers.eu or via post at:
Two Towers Consulting GmbH & Co. KG
Hohenzollernring 51
50672 Cologne, Germany
Your rights
You have the right to obtain information about the personal data that has been stored about you free of charge on request (from the second disclosure of information within 12 months, we can charge you a fee). In addition, you have the right to request the correction of incorrect data, the right to restrict the processing of data whose scope of processing is too broad and the right to delete any unlawfully processed personal data or personal data that has been stored too long (unless there is a statutory retention obligation and no other reasons contrary to Art. 17 para. 3 GDPR). In addition, you have the right to have all data provided by you to us transferred to you in a common file format (right to data portability).
Insofar as you have a right to object to the processing of individual procedures, we point out this in the description of the individual procedures.
To exercise your rights, please send an e-mail to DataProtectionOffice@beeline-group.com
In addition, you also have the right to lodge a complaint with a data protection supervisory authority.
Voluntary nature of data
The provision of your personal data on this website is generally neither legally nor contractually required. You are not obligated to provide personal data on this website, unless we point out the necessity in individual cases in this privacy policy. However, the provision of the functions of this website requires the processing of your personal data.
Overview of the procedures
Personal information is processed on this website as part of the following procedures:
- Contact
- Application portal
- Press portal
- Server log files
- Google Analytics including information about cookies
1. Contact
When contacting us (for example by e-mail or using the contact form), the information you provide will be processed to handle the request and in case of follow-up questions. Insofar as the request concerns the area of activity of a subsidiary of beeline GmbH (eg if it concerns a particular country outside of Germany or a specific business model ("Retail" or "Concessions"), it may be that the inquiry is evaluated to the relevant subsidiary to process your inquiry.
Legal basis
The information provided in the context of establishing contact is processed based on Art. 6 para. 1 and let. f GDPR. This permission allows the processing of personal data in the context of the “legitimate interest” of the data controller, unless your fundamental rights, freedoms or interests prevail. Our justified interest lies in the processing of establishing contact. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the processing of data. All you need to do is send an e-mail to the data protection officer.
Duration of data storage
The personal data stored in the course of establishing contact will be deleted if the concerns associated with the contact have been completely clarified and it is also unlikely that the specific contact will become relevant again in the future.
2. Application portal
Our online offer includes a job market and the opportunity to apply online for vacancies, including submission of unsolicited applications.
To create an applicant profile, you must provide at least your first and last name, your e-mail address and the country of your place of residence. Within the application it is necessary that you additionally indicate your telephone number and how you became aware of the position and add your CV. Later, you can also voluntarily provide additional job-related information to complete your application profile.
There are three ways to make your profile visible. You can change this at any time. You will automatically be informed via e-mail about new vacancies, if you have created a job notification via “Saved Searches/Notifications”.
Depending on which application mode you choose, different beeline employees have access to your data:
a) Consideration for all vacancies worldwide:
Your data will be distributed worldwide within beeline to fill vacancies. All beeline employees, who are generally entrusted with the task of filling a vacancy or would like to fill a vacancy, can access your data.
b) Consideration for all vacancies within the country of my place of residence:
Your data will be shared with beeline within your country of residence to fill vacancies. All beeline employees in the respective country, who are generally entrusted with the task of filling vacancies or would like to fill a vacancy, can access your data.
c) Consideration for vacancies to which I have specifically applied:
Your data will only be used exclusively to fill the vacancies you have applied for. In this case, only the beeline employees involved in the selection process for these vacancies have access to your data.
Legal basis
The processing of your personal data in the context of the application process is based on Art. 6 (1) let. a GDPR. This legal basis allows the processing of personal data if the data subject has given their consent to the processing of their personal data for one or more specific purposes.
As part of the application process, you will be asked to tick a corresponding declaration of consent.
By clicking on the “I consent” box, you declare that:
You consent to the processing of your personal data in accordance with the descriptions of this privacy policy and the retention of your data according to the deadlines described.
If you include special types of personal data in your application (e.g. also in the attachments included by you), you hereby expressly agree that this data is treated in the same way as in the points “Personal data in the application process” and “Duration of data storage in the application process”.
Without your consent no applicant profile will be created and no data will be collected.
A declaration of consent can be withdrawn at any time with effect for the future. Further processing of your application is no longer possible in this case.
Duration of data storage
Even if we cannot hire you based on an application, we will delete your data (if you do not register or update your application profile) 6 months after the last update or submission of an application.
3. Press portal
Our online offer includes a press portal, which offers the possibility to download product photos with no background and to retrieve article information (article number, price). To gain access to the portal, interested parties can register (editorial offices, bloggers, business partners, franchisees, etc.). The following information must be provided for this purpose: First name, last name, company, password, user name, e-mail address, contact category (selection field).
After verification of the information, users are activated for the press portal (manually by Corp. Communication), or accreditation is refused.
Legal basis
The above data is processed on the basis of Art. 6 para. 1 lit. b) GDPR. This permission allows the processing of personal data for the purpose of fulfilling a contract (activation for the press portal implicitly creates a contractual obligation for the use of the portal).
Duration of data storage
Your data will be deleted as soon as you delete your press account. To delete your press account, please click on the "Delete profile" button.
4. Server log files
Each time you access this website, we automatically collect a set of technical data that includes personal data.
The following data is collected:
- IP address of the user
- Name of the retrieved website or file
- Date and time of access
- Amount of data transferred
- Message about successful retrieval
- Browser type and version
- Operating system of the user
- User device, including MAC address
- Referrer URL (the previously visited page)
This data will not be merged with any other personal data you provide through the website. We collect server log files for the purpose of administering the website and detecting and preventing unauthorized access.
Legal basis
The personal data in log files is processed based on Art. 6 para. 1 let. f GDPR. This permission allows the processing of personal data in the context of the “legitimate interest” of the data controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in the ease of administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the processing of data. All you need to do is send an e-mail to the data protection officer.
What are IP addresses?
IP addresses are assigned to any device (e.g. smartphone, tablet, PC) that is connected to the internet. The IP address depends on the internet access your device is currently using to connect to the internet. This can be the IP address assigned to you by your internet service provider, such as when you are connected to the internet through your home Wi-Fi network. This can also be an IP address assigned to you by your mobile service provider or the IP address of a provider of public or private Wi-Fi or other internet access. In its current form (IPv4), the IP address consists of four digits. In most cases, you as a private user will not use a consistent IP address, since you will only be assigned this temporarily by your provider (so-called “dynamic IP address”). With a permanently assigned IP address (so-called “static IP address”), a clear assignment of the user data is in principle simpler. Except for the purpose of determining unauthorized access to our website, we generally use this data in a way that is not related to your person; instead, we evaluate which of our sites are favored, how many accesses are made daily and the like only on an anonymous basis.
Our website already supports the new IPv6 addresses. If you already have an IPv6 address, you should also be aware of the following: The IPv6 address consists of eight blocks of four. The first four blocks, as with the entire IPv4 address, are typically dynamically assigned to private users. However, the last four blocks of an IPv6 address (so-called “interface identifier”) are determined by the device you use to browse the website. As far as this is not set differently in your operating system, the so-called MAC address is used for this purpose. The MAC address is a type of serial number that is unique to any IP-capable device in the world. Therefore, we do not store the last four blocks of your IPv6 address. In general, we recommend that you activate the so-called “privacy extensions” on your device in order to better anonymize the last four blocks of your IPv6 address. Most popular operating systems have a “privacy extensions” feature, which is not factory-set in some cases.
Duration of data storage
The server log files with the above data will be deleted automatically after 30 days. We reserve the right to store the server log files longer, if there are facts that suggest the assumption of unauthorized access (such as the attempt of a hacking or so-called DDOS attack).
5. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses several “cookies” to identify your browser.
General notes about cookies
Cookies are small text files that are saved by your browser when you visit our website on your device. This allows individual services on a website to “recognize” you and “remember” which settings you have made. This serves the user-friendliness of the website and thus the users (e.g. storage of login data). On the other hand, cookies are used to collect statistical data on the use of the website and to use the data obtained for analysis and advertising purposes.
The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, we have activated the IP anonymization feature on this website so that your IP address will be shortened beforehand within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area . Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
Legal basis
The processing of personal data by Google Analytics is based on Art. 6 para. 1 let. f GDPR. This permission allows the processing of personal data in the context of the “legitimate interest” of the data controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in the analysis of the use of our website. You can prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Duration of data storage
The personal reference of the data is created directly by the partial deletion of the IP addresses, so that only statistical data is stored.