Data protection statement

Personal data is all information concerning personal or material circumstances relating to an identified or identifiable person. This includes your name, date of birth, e-mail address, postal address or telephone number, for example. However, information of a general nature which cannot be used to determine your identity is not classified as personal data. For example, the number of users of a website.

The party responsible within the meaning of art. 4 para. 7 of the General Data Protection Regulation (GDPR) is

KPS AG
Beta-Straße 10 H
D-85774 Unterföhring
Germany

If you have any questions about data protection, please send an e-mail to our data protection team or contact them directly:

datenschutz@kps.com

or

Data protection
KPS AG
Beta-Straße 10 H
D-85774 Unterföhring
Germany
T +49 (0)89 35631-0
F +49 (0)89 35631-3300

a. Web server logs including the IP address

No processing of personal data is required for most of our services. This means you can visit our website without informing us who you are.

We only collect and process access data which your internet browser automatically sends to us for technical reasons in order to make the website available. Depending on the type of access log used, the log data set contains general information with the following content: your session data (date and time of request, usage behavior, duration of visit, which links were clicked on, the time zone difference to Greenwich Mean Time (GMT), the amount of data transmitted etc.), the website you were previously on, your IP address, your browser version, your operating system, the domain name and the address of your internet provider (e.g. AOL) and your website-specific settings. If our website cookies are used, the web server also stores this information. This also applies if you visit our website using a mobile device, for example, with a mobile phone browser.

This data does not generally enable you to be traced directly and is used to improve our website. The legal basis for the processing of your personal data is a legitimate interest in accordance with art. 6 para. 1 let. f GDPR. We have a legitimate interest in providing you with a website optimized for your browser and enabling communication between our server and your device.

In the event of misuse of the system, we can also process and use the information logged by the web server in cooperation with your internet provider and/or local authorities to determine who is responsible for such misuse. The legal basis for this is also a legitimate interest, art. 6 para. 1 let. f GDPR. Our legitimate interest lies in the protection of the integrity of our system and our users.

b. Services on our website

Furthermore, we only collect personal data from you if you voluntarily provide it on the website, for example, if you use a contact form or subscribe to a newsletter, place an order or use a particular service.

Requests for contact

You can enter your name, address, e-mail address, the subject of the contact request and your message when making requests via our contact forms.

We only process and store the personal data made available in the contact request to deal with and answer your request and to make contact with you.

The legal basis for the processing of your personal data is the performance of a contract or the performance of steps prior to entering into a contract, art. 6 para. 1 let. b GDPR.

Newsletter

You have to enter your name and e-mail address when signing up for our newsletter.

Provided you have consented to data processing when subscribing to the newsletter, we only process and store the personal data provided when subscribing to the newsletter in order to provide the newsletter and to keep you informed about products and news at KPS according to the newsletter subscribed to. The legal basis for the processing of your personal data is your consent, art. 6 para. 1 let. a GDPR.

You may revoke your consent at any time with future effect. Further information on revoking consent can be found under section 7.

Online application

We collect your name, address, contact details and any other documents provided when you make an online application via the website. As well as you, authorized HR employees at our company and the line manager responsible for the vacancy also have access to your data. Both the HR employees and the managers responsible may belong to other companies in the KPS AG Group which means we may pass on your data within KPS AG.

We only process and store the personal data provided when the application is made to process your application. The legal basis for the processing of your personal data is the performance of a contract or the performance of steps prior to entering into a contract, art. 6 para. 1 let. b GDPR.
If you have registered for our career network, we will process your contact data (title, first and last name, email address) and the other documents submitted to us as part of your application in order to contact you in the future about any other interesting vacancies and career events of the KPS Group. We store and process the data for participation in the career network on the basis of your consent, Art. 6 (1) a GDPR. Your personal data will be deleted if you withdraw your consent. You can revoke your consent to data processing at any time (e.g. by email to career@kps.com ) and do not have to give any reasons for doing so. However, please note that your revocation does not affect the lawfulness of the data processing prior to the time of revocation.”

Orders and information material

When ordering information material via the website (e.g. brochures or studies), your name and e-mail address are required.

We process and store the personal data provided with the order to provide you with the ordered information material. The legal basis for the processing of your personal data is the fulfillment of a contract or the implementation of pre-contractual measures, Article 6, Section 1(b) GDPR.
If you have also subscribed to updates on the dowonlad and its specific topics, you can unsubscribe at any time, e.g. by replying to one of our e-mails.
We also record when and how often you clicked on the link to the information material in order to find out whether and to what extent the information material is actually requested. In this way, we want to continuously improve our offer and align it with the wishes of interested parties, which is a legitimate interest. The legal basis is Article 6, Section 1(f) GDPR.

To ensure the security of your data during transmission, we use state-of-the-art encryption technology (e.g. SSL) via HTTPS.

KPS will not pass your personal data onto third parties or distribute it in any other way unless required for the performance of our services (e.g. applications for positions at subsidiaries) – (legal basis for processing: performance of a contract or performance of steps prior to entering into a contract, art. 6 para. 1 let. b GDPR) or unless the transfer of data is permitted on the basis of applicable legal provisions (legal basis of processing: performance of legal obligations, art. 6 para. 1 let. c GDPR).

KPS is entitled to outsource the processing of your personal data to external service providers fully or partially, within the scope of the provisions of data protection law, which work for KPS as processors pursuant to art. 4 no. 8 GDPR. External service providers assist us, for example, with the technical operation and support of the website, data management, the provision and performance of services, marketing and website analysis. The service providers engaged by KPS only process your data according to our instructions. KPS remains responsible for the protection of your data which we protect through rigorous contractual provisions, technical and organizational measures and additional controls.

We will only store your personal data for as long as we need it to achieve the purposes for which this data was collected or – if legal retention periods extending beyond that exist (e.g. in the commercial code or in the tax code) – for the duration of the retention period specified by law. Your personal data is then deleted by us. Your data may only be stored beyond that in a few exceptional cases, for example, if storage is required in relation to the exercising and protection of legal claims in favor of KPS.

eTracker analytics

The web service “etracker analytics” is a product of etracker GmbH, erste Brunnenstraße 1, 20459 Hamburg, Germany. We are responsible for the use of the web service and etracker GmbH acts on our behalf.
The web service processes the following categories of data:

• IP address; is shortened in the working memory of the data collection server as soon as possible and thus anonymize
• Event type
• Length of stay
• Date and time of visit
• Referrer URL
• Randomly generated user IDs
• Device IDs
• Opt-in if consent has been given

The web service is used to measure user behavior on our website and subsequently create aggregated reports, which we use to improve our website and measure the success of our online marketing campaigns. This service collects information about how visitors scroll through our site and the extent to which predefined events are performed on the website (e.g., clicking on certain elements).
The web service has read and write access to your device. This web service stores information in your browser’s session storage and local storage. In addition, the following cookies are set:

• et_allow_cookies
• et_oi_v2
• isSdEnabled
• cookiesAvailable
• et_coid
• et_oi_services

This web service is used on the basis of Section 25 (1) sentence 1 TTDDG; the subsequent processing of your personal data is based on Art. 6 (1) a) GDPR.
Read access is granted for the duration of your browser session. The data stored on your device will be deleted immediately after you revoke your consent or after 720 days.
If you have given your consent to the use of this web service, you can revoke it at any time with future effect here: .

HubSpot

On our website, we use the services of the software manufacturer HubSpot from the USA with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland). HubSpot is an integrated software solution that can be used to cover various online marketing activities. This includes, for example, our email marketing, the provision of any landing pages and contact forms.

The information collected through visits to any landing pages or the sending of contact or download forms is stored on the servers of our software partner HubSpot Ireland.

We only use a shortened version of the IP address. This means that the IP address of users is shortened by HubSpot within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a HubSpot server in the USA and truncated there.

We use HubSpot on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. We use HubSpot Forms on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, whereby our legitimate interest lies in the provision of any contact forms and simplified communication with interested parties. We would like to point out that when using HubSpot Forms, there is no personal tracking as with HubSpot itself.

Further information on data protection can be found in HubSpot’s privacy policy: HubSpot privacy policy, information on the cookies used by HubSpot.

LinkedIn Insight tag

On our website, we use the marketing function of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”), the so-called LinkedIn Insight Tag.

Each time our website is accessed, a connection to the LinkedIn servers is established. LinkedIn is informed that you have visited our website using your IP address. In particular, the LinkedIn Insight Tag allows us to analyse the success of our campaigns within LinkedIn or to target audiences for them based on how users interact with our site. If you are registered with LinkedIn, LinkedIn will be able to associate your interaction with our website with your user account.

We use the LinkedIn Insight Tag to help us personalise our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 letter f DSGVO.

For further information, please refer to the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy. LinkedIn-Cookie-Table: https://www.linkedin.com/legal/l/cookie-table. An opt-out possibility exists here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Vimeo

The web service “Vimeo” is a product of Vimeo.com, Inc., 555 West 18th Street, New York 10011, USA. We are responsible for the use of the web service and Vimeo Inc. acts as an independent controller.
The web service processes the following categories of data:

• IP address
• IDs generated by Vimeo
• Browser type
• Operating system
• Click behavior
• Length of stay
• Date and time of playback

The web service is used to display videos from the “Vimeo” platform, to measure clicks on Vimeo videos embedded in our website, and to subsequently create reports that we use to improve our website and measure the success of our online marketing campaigns.
The web service accesses your device for reading and writing. The following cookies are set by this web service:

• Vid
• Player
• Markers
• [clip_id]_password
• et_allow_cookies
• [webinar_uid]_webinar_registrant
• lc_[hash]
• player_ clearance
• et_oi_v2
• _cf_bm
• _cfuvid
• isSdEnabled
• cf_ clearance

This web service is used on the basis of Section 25 (1) sentence 1 TDDDG; the subsequent processing of your personal data is carried out on the basis of Art. 6 (1) a) GDPR.
The above data is processed in the USA. An adequacy decision by the EU Commission has been issued for the transfer to Vimeo.com, Inc. (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). In addition, we have concluded Standard Contractual clauses with Vimeo Inc. in accordance with Art. 46 (2) GDPR. A copy can be requested by contacting us as specified in section 2 of this privacy policy.
Read access is granted for the duration of your browser session. The data stored on your device will be deleted immediately upon your revocation or otherwise after 2 years. Personal data is aggregated for the purpose of generating reports, so that individual visitors cannot be identified anymore.

If you have given your consent to the use of this web service, you can revoke it at any time with future effect here: .

Lead Forensics

Our website uses Lead Forensics, a web analysis service provided by Lead Forensics, Communication House, 26 York Street, London W1U 6PZ, Great Britain (“Lead Forensics”). The data collected by Lead Forensics consists of the IP addresses of users of the online offer and also data regarding their use of our website. Lead Forensics will use the data collected on behalf of the operator to evaluate their use of the website to compile reports on website activities and to provide further services relating to website use and Internet use with respect to the website operator.
The IP addresses are reconciled with a Lead Forensics database. Where IP addresses relate to the names of companies in which our online offer is called up will be passed on to us from the Lead Forensics database. In this case we also receive information on which pages of our online offer are called up by the companies concerned. If the IP addresses are not company-related, only statistical information on use of our website is passed on, which does not permit any conclusions to be drawn regarding the people concerned. Lead Forensics does not collect or identify any private IP addresses. Further information can be found at https://www.leadforensics.com/privacy-policy/ or https://www.leadforensics.com/software-data-compliance/ (general information on Lead Forensics and data protection).

Under the applicable data protection law you have the following rights in accordance with the relevant legal provisions:

• Right to information, correction, deletion and restriction: You have the right to request information about your personal data stored by us at any time. If we process or use your personal data, we endeavor to ensure through appropriate measures that your personal data is correct and up-to-date for the purposes for which it was recorded. If your personal data is incorrect or incomplete, you may request its correction. You also have the right to request the deletion or restriction of processing of your personal data, if, for example, a legitimate commercial purpose no longer exists for such processing in accordance with this data protection policy or applicable law and legal retention obligations do not require further storage.
• Right to data transfer: You have the right to receive the personal data about you that you have provided to us in a structured, commonplace and machine-readable format or to transfer this data to another responsible party.
• Right to revoke consent granted: If you have consented to the collection, processing and use of your personal data, you can revoke your consent at any time with future effect but without this affecting the legal validity of the processing carried out on the basis of the consent up to the point of revocation.

You can use the contact options indicated in section 2 at any time to exercise your data protection rights. Please attach your personal ID in this case.

You also have the option of submitting complaints to the competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht; postal address: P.O. Box 606, 91511 Ansbach; tel.: +49 (0) 981 53 1300; e-mail: poststelle@lda.bayern.de.

We reserve the right to amend our data protection policy so that it always complies with current legal requirements or to implement changes to our services in the data protection policy, such as the introduction of new services, for example. The new data protection policy will then apply to your next visit.

Information relevant to data protection with regard to e-mails from the KPS Groups can be found here:  http://kps.com/data-protection/email-disclaimer/