General information on data processing

Scope of personal data processing

We, Ströer X GmbH, Georgiring 3, 04103 Leipzig ("Ströer", "Avedo", "we", "us") process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. As a rule, the processing of personal data of our users is only carried out after the user's consent. An exception applies in cases in which prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.

Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.In the case of the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Description and scope of data processing

For technical reasons, the following data, among others, which your Internet browser transmits to us or to our web space provider, is recorded (so-called server log files):

Browser type and version
operating system used
Website from which you visit us (referrer URL)
Website you are visiting
Your Internet Protocol (IP) address.

This anonymous data is stored separately from any personal data you may have provided and thus does not allow any conclusions to be drawn about a specific person. They are evaluated for statistical purposes in order to be able to optimise our website and our offers.

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

Purpose for data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

Objection and removal option

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Use of meta-components

We use components from the provider Meta.com on our site. Meta is a service of Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

Every time you access our website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from Meta. This process informs Meta which specific page of our website you are currently visiting.

If you visit our site and are logged in to Meta during this time, Meta recognizes which specific page you are visiting through the information collected by the component and assigns this information to your personal account on Meta. For example, if you click on the "Like" button or make corresponding comments, this information will be transmitted to your personal user account on Meta and stored there. In addition, the information that you have visited our site will be shared with Meta. This happens regardless of whether you click on the component or not. If you want to prevent Meta from transmitting and storing data about you and your behavior on our website, you must log out of Meta before visiting our site. Meta's privacy policy provides more detailed information, in particular on the collection and use of data by Meta, on your rights in this regard and on the setting options to protect your privacy:Meta Data Policy

In addition, external tools are available on the market that can be used to block meta-social plugins with add-ons for all common browsers: http://facebook-blocker.jaleco.com

For an overview of meta plugins, see Meta plugins.

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f GDPR. Legitimate interest is the provision of the Services to the User.

Use of Meta Pixel and Meta Conversion

On our website, we use the so-called "meta-pixel" of the social network Meta, which is operated by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

When someone takes an action on our site (e.g., views a specific piece of content), the meta pixel is triggered and the action is reported. Then the pixel tries to attribute this action to a person on Meta. This tells the company when a customer has taken an action after seeing a Meta ad from the company.

The "Advanced Meta Pixel Matching" feature is disabled.

Legal basis for processing personal data

The legal basis for the processing of users' personal data is Art. 6 (1) (f) GDPR.

Purpose of data processing

The purpose of Meta Pixel is to show ads to people who are most likely to perform the desired action, and to provide detailed statistics on how people use the website via the Meta Pixel dashboard.

Duration of storage

The data will be deleted as soon as it is no longer needed for our record-keeping purposes.

Objection and removal option

Although we have legitimate interests in using the Meta Pixel and storing "conversion cookies", we offer you opt-out options. You can object to the collection by the meta pixel and the use of your data to display meta ads. To control what types of ads are shown to you within Meta, you can go to the page set up by Meta and follow the instructions for behavioral advertising settings. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

Tracking via the Meta Pixel on this website is activated. Click here to disable tracking.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can object to the use of cookies that serve reach measurement and advertising purposes via the deactivation page of the network advertising initiative and additionally the US website aboutads.info or the European website youronlinechoices.com.

Use of YouTube components with enhanced privacy mode

On our website we use components (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

Here we use the option provided by YouTube " - extended data protection mode - ".

When you access a page that has an embedded video, a connection to the YouTube servers is established and the content is displayed on the website by means of a message to your browser.

According to YouTube, in the " - extended data protection mode -" only data is transmitted to the YouTube server, in particular which of our websites you have visited when you watch the video. If you're logged in to YouTube at the same time, this information will be associated with your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Further information on YouTube's data protection is provided by Google at the following link: Google Privacy Policy & Terms of Service

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f GDPR. Legitimate interest is the provision of videos for the user.

Privacy Policy for the Use of Google Maps

We use the "Google Maps" component of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google" on our website.

Every time the "Google Maps" component is accessed, Google sets a cookie in order to process user settings and data when the page on which the "Google Maps" component is integrated is displayed. As a rule, this cookie is not deleted by closing the browser, but expires after a certain period of time, unless it is manually deleted by you beforehand.

If you do not agree to this processing of your data, it is possible to deactivate the "Google Maps" service and thus prevent the transmission of data to Google. To do this, you have to deactivate the Java script function in your browser. However, we would like to point out that in this case you will not be able to use "Google Maps" or only to a limited extent.

The use of "Google Maps" and the information obtained through "Google Maps" is carried out in accordance with the Google Terms of Service and the Additional Terms of Use for Google Maps/Google Earth.

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f GDPR.

Consent

By registering with Avedo, a brand of Ströer X GmbH, you provide the company with your personal data via a specific application for the purpose of looking for a job. Your data will be stored and processed on the systems of our software partner Onlyfy by New Work SE (Am Strandkai 1, 20457 Hamburg, Germany). The legal basis is Art. 6 (1) (a) EU General Data Protection Regulation (GDPR).

Data protection and confidentiality

Data protection is an important concern for us. The Ströer X GmbH Group and the software partner Onlyfy of New Work SE have taken the necessary organizational and technical measures to ensure the confidentiality of your application. All employees of the HR department as well as our software partner are obliged to maintain confidentiality about personal data within the framework of their employment contract. Thanks to automatically activated SSL encryption, secure transmission of your data is ensured. The general standards for data security in accordance with the current state of the art are taken into account during data processing.

Use of your personal information

During the application process, in addition to title, surname and first name, the usual correspondence data such as postal address, e-mail address and telephone numbers are stored in the applicant database. In addition, application documents such as letters of motivation, curriculum vitae, vocational, training and further education qualifications as well as job references are recorded. This data will be stored, evaluated, processed or forwarded internally exclusively in the context of your application. They are only accessible to employees of the HR department and the persons responsible for the selection of the Ströer X GmbH Group. Under no circumstances will your data be passed on to companies or persons outside the Ströer X GmbH Group or used for other purposes. The data may be processed for statistical purposes (e.g. reporting). No conclusions can be drawn about individual persons.

Processing of application data

Application profile for online applications, consent

If you submit your application via a website that displays this data protection information ("Online Applications"), you will need to create an application profile. To do this, we first ask you to give your consent to the processing of your personal data by Ströer SE (legal basis Art. 6 para. 1 lit. a GDPR); optionally, you can also give separate consent to the storage of your data in the Ströer applicant pool (more on this below under section d). This consent is required for the further processing of your application. There is no automated addition of your data from other sources (e.g. from social networks, credit reports). Further information on revocation and the consequences of revocation can be found in Section 7 below.

We will then ask you to provide your e-mail address and a password of your choice in the corresponding online form. After you have submitted this data to us, you will receive a confirmation of the creation of your application profile by e-mail and can access your application profile at any time via the link contained therein, edit your data or delete the entire application profile.

Collection of application data

After creating your application profile, you can use it to submit applications to us. In order to be able to process an application, we ask you to provide personal data. These include, in particular:

Your first and last name, your postal address (street, postcode and city), your date of birth, your gender and a telephone number, in the case of applications for a specific job advertisement of a Ströer company, any other information required for the respective position (such as information about your driver's license), information about your education and previous professional experience as well as information about your knowledge and skills (e.g. language skills, Knowledge and skills in dealing with specific software). You also have the option of attaching further documents to your application, such as your CV, proof of your education and previous professional activity, a photo or other proof of qualifications.

If certain information or documents are required for the further processing of your application, this will either be noted in the job advertisement and/or will be indicated by us as part of the online application. Without this necessary information, we may not be able to process your application any further.

Further processing of application data

If you have submitted an application to us, we will process the information and documents submitted with your application to process your application. If you submit your application to us as an online application via your application account, we will also process the data collected from your applicant account. Furthermore, the communication between you and us or the respective Ströer X company is stored by us.

Since Ströer X processes all applications for jobs at Ströer X companies centrally, this processing is usually associated with the transmission of your application data to one or more Ströer X companies. Depending on your application, this can be the Ströer X company that has advertised a specific vacancy for which you are applying, or the Ströer X company that has advertised a vacancy that matches your unsolicited application, or the Ströer X company that has advertised a vacancy that matches your applicant profile. Your application data will only be made available to those employees who are involved in the application process. In addition to the employees of the HR departments at Ströer X and the respective Ströer X companies, these are employees in the specialist departments who would like to fill a vacancy.

Insofar as we use external service providers to process applications, they are obliged to comply with the applicable data protection regulations in the same way as we and the Ströer X companies on the basis of separate contractual agreements and process your personal data only on our instructions.

Further processing of application data with Customer Match Lists

We use Customer Match Lists as part of our Google Ads and Meta advertising activities, including "Exclusionary Audiences" and "Lookalike Audiences". For the use of Customer Match, lists with encrypted (SHA 256) are used. User data (e.g. email addresses) uploaded to Google Ads (Gmail customers only) or Meta. After uploading, the system checks which data is already known and classifies these users into a list. After the Customer Match lists have been created, the encrypted customer data is automatically deleted. The providers do not get new addresses as a result!

Processing and storage of your data in the Ströer X / Avedo applicant pool

Before creating your application profile, you can also give us consent to the storage of your application data in the Ströer X / Avedo applicant pool. The Ströer X / Avedo applicant pool is a database that can be accessed by the HR departments of Ströer X and the Ströer X companies in order to be able to identify possible candidates for vacancies, regardless of specific advertised positions.

If you give this separate consent, we will store your data for a period of 12 months from the creation of your application profile and the transmission of your application data. Consent to the storage of your application data in the Ströer X / Avedo applicant pool is voluntary, and your application will be processed regardless of the granting/non-granting or revocation of this consent.

Of course, you have the option of revoking your separate consent to the storage of your data in the Ströer X / Avedo applicant pool at any time with effect for the future. For more information, see Section 7 below.

We will inform you via the e-mail address you have provided if your application data is stored in the Ströer X / Avedo applicant pool beyond the completion of a specific application process, so that you can decide on the further storage of your data in the Ströer X / Avedo applicant pool.

Requirement of application data

The provision of your personal data is necessary for the implementation of the application process. You are not legally or contractually obliged to provide personal data for application purposes. Please note, however, that if you do not provide us with required information marked as such, we will not be able to process your application.

The storage of your application data in the Ströer X/Avedo applicant pool is completely voluntary.

Purposes and legal bases of data processing of application data

The processing of your application data by us or a Ströer company is carried out exclusively for the purposes of the application process. If an employment relationship results from the application process, data processing is carried out by the respective employer (Ströer X or a respective Ströer X company) for the performance of this employment relationship.

The legal basis for the processing of your application data by Ströer X and the (optional) processing in the Ströer X / Avedo applicant pool is the consent given by you when creating your applicant profile (Art. 6 para. 1 lit. a GDPR).

The legal basis for the processing of your application data by the respective employer is Art. 6 para. 1 lit. b GDPR and § 26 BDSG (new).

Disclosure of personal data in the application process

Your application data submitted to us will be disclosed by us to the following recipients or categories of recipients:

The Ströer X companies as described in this Privacy Policy. The service providers engaged by us in connection with the implementation of the application process within and, if applicable, also outside the EU/EEA (see section 5), who provide services for us on a separate contractual basis, which may also include the processing of personal data in the context of a contract processing relationship, as well as the subcontractors of our service providers engaged with our consent. Entities to which we are required to disclose personal data in order to comply with a legal obligation (legal basis Art. 6 para. 1 lit. c GDPR).

Transfer of personal data to third countries within the application process

We do not currently intend to transfer your personal data to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the Agreement on the European Economic Area in which a level of data protection comparable to that in the European Union cannot be assumed without further ado.

Duration of storage of personal data of an application

Your personal data will be stored or deleted in compliance with the following provisions:

In principle, we store your application data until the end of a maximum of six months after the final decision on filling the position for which you have applied.

If you have given your separate express consent to the storage of your application data in the Ströer X / Avedo applicant pool, we will store your application data here for a period of 12 months from the creation of your application profile and the transmission of your application data.

Storage beyond the period of six months is also possible if there are legitimate reasons, e.g. if claims are made against the non-consideration of your application.

After the expiry of the aforementioned periods, or if you delete the application profile you have created yourself or revoke any consent required for further storage, the data you provide will be anonymised and the documents you send will be deleted; After this date, we will only process non-personal data for statistical evaluation purposes. An exception applies if we need your data to comply with legal obligations (e.g. for archiving purposes under commercial and tax law) despite the deletion of your application profile or the revocation of consent; in this case, we will continue to store your data only for these purposes without direct access and will anonymize or delete it after these purposes have ceased to exist.

If an employment relationship is established with us or a Ströer X company on the basis of your application, your application data will also be processed by the respective employer for the performance of the employment relationship.

Your rights regarding the processing of personal data in the application process

With regard to the processing of your data, you have the right to information, correction, deletion or restriction of processing, to revocation and to data portability. In detail, as follows:

A right to information against us in relation to your data (Art. 15 GDPR), a right to rectification if your data is incorrect (Art. 16 GDPR), a right to erasure, in particular if storage of your data for the purposes mentioned is no longer necessary, if the storage is based on consent that you have since revoked and there is no other legal basis for storage by us, if we have processed your data unlawfully or if there is a legal obligation to erasure (so-called "right to be forgotten", Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to data portability with regard to your data that you have provided to us, if the processing is based on your consent or a contract with us. You can request the data you have provided to us in a structured, commonly used and machine-readable format to yourself or to third parties (Art. 20 GDPR), a right to revoke the consent given, Art. 7 para. 3 GDPR. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent before the revocation. Please note, however, that in the event of a revocation of your consent to the processing of your applicant data by Ströer SE, we will not be able to process your application any further. On the other hand, you can revoke your consent to the storage of your data in the Ströer applicant pool even during an ongoing application process without affecting this application process. You can declare the revocation of your consent, for example, in your application profile.

Some of the aforementioned rights are restricted by law. Therefore, if we are unable to comply with these rights, we will notify you.

In addition, if we do not deal with your request appropriately from your point of view (without prejudice to any other administrative or judicial remedy), you have the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.

Right of providing information

With a request for information, you can request information about which data about you is being processed. Please send this to our HR department. You have the option of accessing, modifying or deleting your electronic data at any time.

Storage and deletion of data

If you take up a job at the Ströer X GmbH Group, your personal data, or an excerpt of it, will be added to your personnel file. If you have applied but have received a rejection letter, your information will be stored for about 6 months after completion of the application process and then deleted (profile and application). There will be no notification of the deletion of the data. This does not apply if longer storage is necessary due to legal requirements (e.g. the burden of proof under the General Equal Treatment Act) or if you have expressly agreed to longer storage in our database of interested parties.

These processing operations of personal data are carried out here on the basis of a consent that the applicant gives us when sending us his application documents. Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for this. You can revoke your declaration of consent under data protection law at any time with effect for the future.

If your job application is rejected, the data you have submitted will be deleted automatically up to a maximum of six months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (e.g. the burden of proof under the General Equal Treatment Act) or if you have expressly agreed to longer storage in our database of interested parties.

Contact form and e-mail contact

Description and scope of data processing

There is a contact form on our website, which can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. At the time the message is sent, the following data will also be stored:

The user's IP address
Date and time of registration

Your consent will be obtained for the processing of the data as part of the submission process and reference will be made to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the e-mail conversation.

Legal basis for data processing

The legal basis for the processing of the data is Art. 6 (1) (a) GDPR if the user has consented.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

Purpose of data processing

The processing of the personal data from the input mask serves us solely to process the contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the facts in question have been conclusively clarified.

Objection and removal option

The user has the option of withdrawing his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

In this case, all personal data stored in the course of contacting us will be deleted.

Description and scope of data processing

In this section, you will learn how we process personal data of contact persons at (potential) customers, prospects, suppliers and partners (hereinafter referred to as "business partners") in the context of the business relationship with us.

In this context, we process the following data:

Contact information, such as full name, business address, business phone number, business mobile phone number, business fax number, and business email address;
Payment data, such as data required for payment processing and fraud prevention;
Other information that is necessarily processed in the context of a project or contractual relationship with us or voluntarily provided by the business partner, such as personal data relating to orders placed, requests, system and application accesses and project details;
Personal data collected from publicly available resources, integrity databases and credit reference agencies

We may process the personal data for the following purposes:

Communicating with business partners about products, services and projects, e.g. by responding to inquiries or requests or providing information about purchased services
planning, implementation and management of the (contractual) relationship with business partners; e.g. by carrying out transactions and service orders, processing payments, providing application and system access, carrying out accounting, auditing, billing and collection activities.
Administer and conduct customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other customer activities or events;
maintaining and protecting the security of our services and websites, preventing and detecting security threats, fraud, or other criminal or malicious activity;
Ensuring compliance with legal obligations (e.g., record-keeping obligations), compliance screening obligations of business partners (to prevent economic or money laundering offenses), and our policies or industry standards; and
Resolve disputes, enforce our contractual agreements, and establish, exercise, or defend legal claims.

Legal basis for data processing

The processing of personal data is necessary for the fulfilment of the above-mentioned purposes, including the performance of the (contractual) business relationship with the business partner. The legal basis for the processing is – unless otherwise noted:

Performance of a contract (Art. 6 para. 1 lit. b GDPR),
legitimate interest (Art. 6 para. 1 lit. f GDPR),
the fulfilment of our legal obligation (Art. 1 lit. c GDPR) or
the express consent of our contact person (Art. 6 para. 1 lit. a GDPR).

Transfer and disclosure of personal data

We may share personal information with affiliates if necessary to fulfill the purposes set out above.

We may disclose personal data to courts, authorities or law firms if we are required to do so by law or if this is necessary for the establishment, exercise or defence of legal claims.

In addition, we are supported by service providers (so-called processors), e.g. for IT maintenance services.

In some cases, the named recipients of personal data may be located in countries outside the European Union (EU) or the European Economic Area (EEA), which may have a lower level of data protection than within the EU. In such cases, we will ensure an adequate level of data protection for personal data by other means. A transfer will only take place if the recipient has signed EU standard contractual clauses with us or implemented Binding Corporate Rules.

Duration of storage

Unless otherwise stated at the time the personal data is collected, we will delete your personal data when the retention of such personal data is no longer necessary (i) for the purposes for which it was collected or otherwise processed, or (ii) to comply with legal obligations (e.g. tax or commercial retention obligations).

Information, deletion, blocking

At any time, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing, as well as the right to rectification, blocking or deletion of this data. For this and other questions on the subject of personal data, you can contact us at any time via the address of the website operator given in the imprint, by e-mail to Info@avedo.de or directly to the data protection officer of Ströer X GmbH.

Data Protection Officer of Ströer X GmbH

Ströer X GmbH
Data Protection Officer
Georgiring 3
DE-04103 Leipzig

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint was lodged informs the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

General information on data processing