Data Protection

We are pleased about your interest in our company. Data protection is of particular importance to us at avency. Protecting your privacy while using our websites is especially important to us.

Therefore, we would like to thoroughly inform you below about the collection of anonymous and personal data—particularly regarding the nature, scope, and purpose of this data. Additionally, we want to educate the visitors of our website about their rights.

Data Protection Officer

The Data Protection Officer of the responsible party is:

Daniel Pohl, Fritz und Mark Legal
Rechtsanwaltsgesellschaft mbH
Bernhard-Ernst-Str. 12
D-48155 Münster

Phone.: +49 – (0)251 – 149828-0
E-Mail: datenschutz@avency.de

Any affected person can contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.

Collection of General Data and Information

The website of avency GmbH collects a variety of general data and information with each visit to the website. This general data and information is stored in the server’s log files. The following can be collected:

1. The types and versions of browsers used
2. The operating system used by the accessing system
3. The webpage from which an accessing system arrives at our website (the so-called referrer)
4. The subpages accessed on our website by an accessing system
5. The date and time of access to the website
6. An Internet Protocol address (IP address)
7. The Internet service provider of the accessing system, and other similar data and information that serve to provide law enforcement in the event of attacks on our information technology systems.

When using this general data and information, avency does not draw conclusions about the affected person. This information is instead needed to:

1. Deliver the content of our website correctly
2. Optimize the content of our website and the advertising for it
3. Ensure the permanent functionality of our information technology systems and the technology of our website
4. Provide law enforcement agencies with the necessary information for prosecution in the event of a cyber attack

These anonymously collected data and information are evaluated by avency GmbH for statistical purposes and also with the aim of enhancing data protection and data security in our company, ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data provided by a website user.

Collection and Processing of Personal Data

Use of our websites is generally possible without providing any personal data. However, if a website visitor wishes to use special services offered by our company through our website, the processing of personal data may be necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the affected person. Furthermore, there is no transfer to any other third parties.

The processing of personal data, such as the name, address, email address, or telephone number of the affected person, is always carried out in accordance with the General Data Protection Regulation and in compliance with the relevant national data protection regulations applicable to avency GmbH.

You have the option to submit your job application digitally. In addition to your contact details, qualifications can be uploaded. Your data will be processed based on Article 6 (1) (b) GDPR in conjunction with Section 10 HmbDSG and, if applicable, Article 6 (1) (a) GDPR (and the consent for retention in the applicant tool).

Your data is collected and processed for the following purposes:

• Selection process for a job posting
• In the case of a speculative application, to determine whether the profile matches an available position
• Contacting you for the purpose of inviting you to an interview
• Conducting an interview
• Potential conclusion of an employment contract

Your personal data will not be shared with third parties. Data transmission occurs via SSL encryption.

Cookies

Third-Party Plugins and Tools

Web Analytics Service: Google Analytics 4

Type and Purpose of Processing

Google Analytics uses cookies to analyze how you use our websites. The information collected through cookies about your usage of this website is typically transmitted to a Google server in the USA and stored there.

In Google Analytics 4, IP address anonymization is enabled by default. Due to IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and there truncated. According to Google, the IP address transmitted from your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of “events.” Events may include:

First visit to the website
Start of the session
Visited web pages
Your “click path,” interaction with the website
Scrolls (whenever a user scrolls to the bottom of the page (90%))
Clicks on external links
Internal search queries
Interaction with videos
Displayed/clicked ads
Language settings

Additionally, the following information is recorded:

Your approximate location (region)
Date and time of the visit
Your IP address (in truncated form)
Technical information about your browser and the devices you use (e.g., language settings, screen resolution)
Your Internet service provider
The referrer URL (the website/advertisement through which you accessed this website)

Purposes of Processing

On behalf of the operator of this website, Google will use this information to evaluate your [pseudonymous [NOT WHEN USING USER-ID]] usage of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website [OPTIONAL: and the success of our marketing campaigns].

Recipients

The recipients of the data are/can be:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor under Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Transfer to Third Countries

On July 10, 2023, the European Commission adopted its adequacy decision for the USA. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed globally and a transfer to third countries (for example, to Singapore) cannot be entirely ruled out, we have also concluded the EU Standard Contractual Clauses with the provider.

Storage Duration

The data we send and that is linked to [specific identifiers] will be automatically deleted after 2 [OR: 14 months]. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is deleted automatically once a month.

Legal Basis

The legal basis for this data processing is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TTDSG.

Revocation

You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The legality of processing based on consent prior to the revocation remains unaffected.
You can also prevent the storage of [specific identifiers] from the outset by adjusting the settings of your browser software. However, if you configure your browser to refuse all cookies, this may restrict functionality on this and other websites. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by
a. Not granting your consent to the setting of the cookie or
b. downloading and installing the browser add-on to disable Google Analytics here.
Nähere Informationen zu Nutzungsbedingungen von Google Analytics und zum Datenschutz bei Google finden Sie unter Google Terms of Service und unter Google Privacy Policy.

Brevo (formerly SendInBlue) GmbH

You can subscribe to a newsletter. To provide this service, we use the shipping service provider Brevo (formerly Sendinblue) GmbH. Information on the data protection practices of Brevo can be found on the following page: www.brevo.com/de/legal/privacypolicy or under Contact: Brevo GmbH, Köpenicker Straße 126, 10179 Berlin.

Your Rights to Confirmation, Information, Correction, Blocking, and Deletion

You have the right to receive information at any time about your personal data stored with us—regarding the purposes of processing, the types and/or categories of data, the duration of storage, etc. You also have the right to correction, blocking, or, apart from the required data retention for business processing, deletion of your personal data.

If you wish to request the correction, blocking, or deletion of personal data stored with us, please feel free to contact our Data Protection Officer at any time.

Your Rights to Restrict Processing, Object to Processing, and Withdraw Consent

Sie haben das Recht, eine Einschränkung der Verarbeitung zu verlangen, jederzeit gegen die Verarbeitung sie betreffender personenbezogener Daten, die aufgrund von Art. 6 Abs. 1 Buchstaben e oder f DS-GVO erfolgt, Widerspruch einzulegen und eine Einwilligung zur Verarbeitung personenbezogener Daten jederzeit zu widerrufen.

Sollten Sie eines dieser Rechte wahrnehmen wollen, Möchte die betroffene Person ihr Recht auf Widerruf einer Einwilligung geltend machen, wenden Sie sich jederzeit an unseren Datenschutzbeauftragten.

Changes to Our Privacy Policy and Disclaimer

You have the right to request a restriction on processing, to object at any time to the processing of personal data concerning you that is carried out based on Article 6 (1) (e) or (f) of the GDPR, and to withdraw your consent to the processing of personal data at any time.

If you wish to exercise any of these rights, or if the affected person wants to assert their right to withdraw consent, please feel free to contact our Data Protection Officer at any time.