Privacy policy for the Projectlancer GmbH website

1. SCOPE OF APPLICATION

This data protection declaration applies to the Projectlancer GmbH https://projectlancer.de website and to the personal data collected via this website. The data protection notices and declarations of other providers to which reference is made, e.g. via links, apply to the Internet pages of these providers. According to Art. 4 DS-GVO, personal data is any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. References to legal regulations refer to the Basic Data Protection Regulation (DS-GVO), as well as the Federal Data Protection Act (BDSG) in the version valid from 25.05.2018.

2. PERSON RESPONSIBLE FOR DATA PROCESSING
is responsible for the processing of personal data described below:
Projectlancer GmbH
Address: Darmstädter Strasse 2, 10707 Berlin
commercial register:
Commercial register number HRB 224170 B
VAT ID no.: DE336769390

Management: Noah Henry Kruse

3. CONTACT PERSON
Projectlancer GmbH has appointed a company group data protection officer (DPO) in accordance with Article 37 of the DS-GVO. The contact details of the data protection officer of Projectlancer GmbH: Darmstädter Strasse 2, 10707 Berlin
e-mail: info@projectlancer.de

4. WHAT SOURCES AND DATA DO WE USE?
When you call up our web pages, you transmit data to our web server via your Internet browser (for technical reasons). The following data is recorded during a running connection for communication between your internet browser and our web server:
Date and time of the request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
Used web browser and used operating system
Complete IP address of the requesting computer
Transferred data volume
For reasons of technical security, in particular to defend against attempts to attack our web server, this data is stored by us for a short period of time. It is not possible for us to draw conclusions about individual persons based on this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. In anonymized form, the data is also processed for statistical purposes; it is not compared with other data sets or passed on to third parties, even in excerpts. With the exception of the above-mentioned data, personal data will only be stored if you provide us with this data yourself, e.g. as part of a registration, a survey or in order to execute a contract, and in these cases only to the extent that we are permitted to do so by virtue of your consent or in accordance with the applicable legal provisions (for further information, please refer to the section “Processing purposes and legal basis” below). You are neither legally nor contractually obliged to provide us with your personal data. However, it is possible that certain functions of our websites depend on the provision of personal data. If you do not provide personal data in these cases, this may mean that functions are not available or only available to a limited extent.

5. PROCESSING PURPOSES AND LEGAL BASIS
We process personal data in accordance with the provisions of the European Data Protection Basic Regulation (DS-GVO), the Federal Data Protection Act (BDSG) and other relevant laws. We use the personal data collected during a visit to our website to operate it as conveniently as possible for you and to protect our IT systems from attacks and other illegal activities. If you provide us with further personal data, e.g. in the context of a registration, a contact form, a survey or for the execution of a contract, we use this data for the purposes mentioned, for customer administration and – if necessary – for the processing and accounting of any business transactions, in each case to the extent necessary. Insofar as you have given us your consent for the processing of your personal data, this constitutes the legal basis for the processing (Art. 6 para. 1 letter a DSGVO). A granted consent can be revoked at any time. This also applies to the revocation of declarations of consent that were issued to us prior to the validity of the DS-GVO, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. The legal basis for the processing of personal data for the purposes of initiating or fulfilling a contract with you is Article 6 (1) (b) DS-GVO. Insofar as the processing of your personal data is necessary for the fulfilment of our legal obligations (e.g. for the storage of data), we are obligated to comply with Art. 6 Par. 1 letter b DS-GVO. c DS-GVO. In addition, we process personal data for the purpose of safeguarding our legitimate interests and the legitimate interests of third parties in accordance with Art. 6 Para. 1 letter f DSGVO. Such legitimate interests include maintaining the functionality of our IT systems, but also the marketing of our own and third-party products and services and the legally required documentation of business contacts.

6. RECIPIENT AND TRANSFER TO THIRD PARTIES
Within the company, only those persons who need to have access to your data have access.

Order processors and other service providers
We take over the operation of our website ourselves for the attention of our data protection officer. In connection with the maintenance and care of the systems, he may also become aware of your personal data. We ensure that the data processing is carried out in a permissible manner. In addition, other qualified service providers (IT service providers, marketing agencies) may be used to optimize our website. We only pass on personal data to these service providers if this is necessary for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests or if you have consented to this. In case of order processing, an order processing contract will be concluded to ensure that the data processing is carried out in a permissible manner.

Third party offers
Our websites may also contain offers from third parties. If you click on such offers, we transfer data to the respective provider to the required extent (e.g. the information that you have found this offer with us and, if applicable, further information that you have already provided for this purpose on our websites). Social plug-ins If we use so-called “social plug-ins” of social networks such as Facebook, Twitter, XING and Google+ on our websites, we integrate them as follows: When you visit our websites, the social plug-ins are deactivated, i.e. no data is transmitted to the operators of these networks. If you want to use one of the networks, click on the respective Social Plug-in to establish a direct connection to the server of the respective network. If you have a user account with the network and are logged in at the moment the Social Plug-in is activated, the network can assign your visit to our websites to your user account. If you want to avoid this, please log out of the network before activating the Social Plug-in. When you activate a Social Plug-in, the network transmits the content that becomes available as a result directly to your browser, which embeds it in our websites. In this situation, data transfers can also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on this platform are governed solely by the privacy policy of the respective network.
The Social Plug-in remains active until you deactivate it or delete your cookies (see the “Cookies” section below for more information). If you activate a Social Plug-in, it is possible that personal data may be transferred to providers in countries outside the European Economic Area which, from the perspective of the European Union (“EU”), do not guarantee an “adequate level of protection” for the processing of personal data that meets EU standards. Please bear this in mind before you activate a social plug-in and thus trigger a transfer of your data.

Google Analytics and Tag Manager
This website uses the service “Google Analytics”, which is offered by Google Inc., to analyze the use of the website by users. Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) is certified according to the EUU.S. Privacy Shield. The service uses “cookies” – text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there. IP anonymization is used on this website. The IP address of users is shortened within the member states of the EU and the European Economic Area. Due to this shortening, the personal reference of your IP address is no longer necessary. As part of the agreement on order processing which the website operator has concluded with Google Inc., the latter uses the information collected to create an evaluation of website use and website activity and provides services associated with Internet use. You have the option of preventing the cookie from being stored on your device by making the appropriate settings in your browser. If your browser does not allow cookies, there is no guarantee that you will be able to access all functions of this website without restrictions. You can prevent the transmission of your data and its collection and processing by Google. Google informs about this via the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

We may also use the “Google Tag Manager” to integrate and manage Google’s analysis and marketing services into our website. Through this service, website tags can be managed through an interface. The Google Tool Manager only implements tags. This means: no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it will remain for all tracking tags as long as they are implemented with the Google Tag Manager.

LinkedIn
Within our online offer we use the marketing functions (so-called “LinkedIn Insight Tag”) of the network LinkedIn. The provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn will be notified that you have visited our sites using your IP address. In particular, the LinkedIn Insight Tag allows us to analyze the success of our campaigns within LinkedIn or to determine target audiences for them based on how users interact with our online offerings. If you are registered with LinkedIn, LinkedIn will be able to associate your interaction with our site with your account. LinkedIn is certified under the Privacy Shield Agreement, which guarantees compliance with European data protection laws: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Here you can find more information about data usage by LinkedIn:
https://www.linkedin.com/legal/privacy-policy
Here you can find the cookie policy of LinkedIn: https://www.linkedin.com/legal/cookie-policy
You can prevent the transfer of your data and its collection and processing by LinkedIn. LinkedIn informs you about this via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Vimeo
Videos about Vimeo.com are included on this website. This is a service provided by Vimeo, Inc. 555 West 18th Street, New York, New York 10011, USA (hereafter “Vimeo”). When you access videos through Vimeo, a connection is established to Vimeo’s servers in the USA. Through this connection, certain information is transmitted to Vimeo. It is also possible that Vimeo may store cookies on your end device. In addition, Vimeo allows you to use certain other functions, such as rating or sharing videos. This may require you to log in to Vimeo or certain third parties (such as Facebook or Twitter) with your user account so that they can associate the information you submit with your user account. These features are offered exclusively by Vimeo and the respective third parties, and you should carefully review their privacy policies before using the respective features. Through the integration, Vimeo may also receive information that your browser has called up the appropriate page on this website, even if you do not have a Vimeo user account or are not currently logged in to Vimeo. Vimeo is an active participant in the EU-U.S. Privacy Shield Framework, which regulates the correct and secure transfer of personal data.
More information about this can be found at: https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active.

For information on data protection at Vimeo, please visit: https://vimeo.com/privacy.

7. COOKIES
Cookies are small text files that are stored on your computer when you call up our website and enable your browser to be reassigned. Cookies store information such as your language setting, the duration of your visit to our website or your entries made there. There are different types of cookies. Session cookies are temporary cookies that are stored in the user’s Internet browser until the browser window is closed and the session cookies are thus deleted. Permanent or persistent cookies are used for repeated visits and are stored in the user’s browser for a pre-defined period of time. First-party cookies are set by the website that the user visits. Only this website is allowed to read information from the cookies. Third party cookies are set by organizations that are not operators of the website the user is visiting. These cookies are used by marketing companies, for example. The cookies used on this website are:

Borlabs cookie
Saves the settings of visitors selected in the Cookie Box of Borlabs Cookie.
WordPress
Cookies to improve the stability and usability of the site.
xmapping
Saves the address and port number of the web server that manages the session. Is used to improve the performance security of the website.
Google-analytics
Cookie from Google for website analysis. Generates statistical data about how visitors use the website.
google tag manager
Cookie from Google to control advanced script and event handling.

8. DATA STORAGE
We delete your IP address and the name of your Internet service provider, which we only store for security reasons, after seven days. Otherwise, we delete your personal data as soon as the purpose for which we collected and processed the data no longer applies. Beyond this point in time, data will only be stored if this is necessary according to the laws, regulations or other legal provisions of the European Union or a member state of the European Union to which we are subject.

9. DATA TRANSMISSIONS TO THIRD COUNTRIES
If we transfer personal data to service providers or group companies outside the European Economic Area (EEA), the transfer will only take place if we are authorized to do so and the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contract clauses) are in place.
Further information and a copy of the measures implemented can be obtained from the Group Privacy Officer.

10. YOUR RIGHTS
Every data subject has the right to information in accordance with Art. 15 DS-GVO, the right of correction in accordance with Art. 16 DS-GVO, the right of deletion in accordance with Art. 17 DS-GVO, the right to restrict processing in accordance with Art. 18 DS-GVO and the right to data transferability under Art. 20 DS-GVO. In the case of the right of information and the right of deletion, the restrictions pursuant to Articles 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 DS-GVO in connection with § 19 BDSG): Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 – 18 (5th floor)
10969 Berlin
Phone: 030 13889-0
e-mail: mailbox@datenschutz-berlin.de
Information about your right to object under Art. 21 (DS-GVO) Individual case related right of objection Under Art. 21 DS-GVO you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DS-GVO. If you lodge an objection, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. The objection can be made in each case without formality. You will find our contact details under points 2 and 3.

11. TECHNICAL SECURITY
We use technical and organizational security measures in order to protect your data managed by us against manipulation, loss, destruction and against access by unauthorized persons. We continuously improve our security measures in accordance with technological developments. For security reasons and to protect the transmission of personal data and other confidential contents (e.g. orders or inquiries to the responsible person), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line. For security reasons, we recommend that you transmit e-mails only in encrypted form. There are considerable risks involved in transmitting unencrypted messages. Therefore, please do not send us any sensitive data by unencrypted e-mail.

12. PROFILING
We do not use purely automated decision-making procedures in accordance with Article 22 DS-GVO. If we do use such a procedure in individual cases in the future, we will inform you of this separately if this is required by law.

13. CHANGES TO THE DATA PROTECTION INFORMATION
We may change this privacy statement at any time by posting the amended version on this website, including the effective date of the amended version.
Date of publication: December 1st, 2020.