Privacy policy according to the DSGVO

I. Name and address of the responsible person

adag Payroll Services GmbH
Gneisenaustrasse 66
10961 Berlin
Germany

Tel.: 030 695798 71
E-mail: info@adag.tv
Website:
www.adag.tv

is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.

II. Name and address of the data protection officer

The data protection officer of the controller is:

Justyna Rulewicz
AGOR AG
Hanauer Landstr. 151-153
60314 Frankfurt am Main

Tel: +49 (0) 69 – 9043 79 65
E-mail: info@agor-ag.com
Website:
www.agor-ag.com

III. general information on data processing

1. scope of the processing of personal data

As a matter of principle, we collect and use personal data of the users of our homepage only to the extent that this is necessary for the provision of a functional website, our contents and services.

In principle, the collection and use of personal data of our users only takes place after their consent. An exception to this principle applies in cases where processing of the data is permitted by legal regulations or obtaining prior consent is not possible for factual reasons.

2. legal basis for the processing of personal data

The legal bases for the processing of personal data result in principle from:

  • 6 para. 1 lit. a GDPR when obtaining the consent of the data subject.
  • 6 para. 1 lit. b GDPR for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary for the performance of pre-contractual measures.
  • 6 para. 1 lit. c DSGVO for processing operations necessary for compliance with a legal obligation.
  • 6 para. 1 lit. d GDPR, if vital interests of the data subject or another natural person make processing of personal data necessary.
  • 6 para. 1 lit. f DSGVO, if the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest.

3. data deletion and storage period

The personal data of the users will be deleted or blocked as soon as the purpose of the storage ceases to apply. Storage beyond this may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

IV. Use of our website, general information

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the user’s computer system. The following information is collected:

  • Information about the browser type and version used
  • The operating system of the user
  • The IP address of the user
  • Date and time of access
  • Websites from which the user’s system accesses our Internet site
  • Preferred browser language

The described data is stored in the log files of our system. This data is not stored together with other personal data of the user.

2. purpose and legal basis for data processing

The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user’s computer.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.

The collection of your personal data for the provision of our website and the storage of the data in log files is mandatory for the operation of the website. Therefore, there is no possibility for the user to object.

3. duration of storage

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Insofar as your data is collected to ensure the provision of the website, the data is deleted when the respective session has ended.

If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this is possible, in which case the IP addresses of the users are deleted or alienated. An assignment of the calling client is thus no longer possible.

V. General information on the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If you call up a website, a cookie may be stored on your operating system. This contains a characteristic string that enables the browser to be uniquely identified when the website is called up again.

Cookies are used by us to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change.

The legal basis for the storage of cookies, device identifiers and similar tracking technologies or for the storage of information in the end user’s terminal equipment and access to this information is the European ePrivacy Directive in conjunction with the Telecommunications and Telemedia Data Protection Act (TTDSG).

Please note that the legal basis for the processing of personal data collected in this context is then derived from the GDPR (Art. 6 para. 1 S.1 GDPR) arise. The relevant legal basis for the processing of personal data in each specific case can be found below the respective cookie or the respective processing itself.

The primary legal basis for the storage of information in the end-user’s terminal equipment – in particular for the storage of cookies – is your consent, § 25 para. 1 S.1 TTDSG. The consent is given when visiting our website -which of course does not have to be given- and can be revoked at any time in the cookie settings.

According to § 25 para. 2 No. 2 TTDSG, consent is not required if the storage of information in the end user’s terminal equipment or the access to information already stored in the end user’s terminal equipment is absolutely necessary for the provider of a telemedia service to provide a telemedia service expressly requested by the user. You can see from the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as “technically necessary cookies”), therefore falling under the exception of § 25 para. 2 TTDSG and therefore do not require consent.

The following data is stored and transmitted:

Language settings

The purpose of the use of technically necessary cookies is to simplify the use of our website.

We would like to point out that some functions of our website can only be offered with the use of cookies. These are the following applications:

Adoption of language settings

We do not use user data collected through technically necessary cookies to create user profiles.

Cookies are stored on the user’s computer and transmitted by the user to our site. Consequently, as a user, you have control over the use of cookies. You can restrict or deactivate the transmission of cookies by making changes in the settings of your Internet browser. Stored cookies can also be deleted there. Please note that you may no longer be able to use all the functions of our website if you disable cookies.

VI. Your rights / rights of the data subject

According to the EU General Data Protection Regulation, you have the following rights as a data subject:

1. right to information

You have the right to obtain from us, as data controller, the information whether we are processing personal data concerning you.

In addition, you could request information about the following:

(1) Purpose of data processing;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage duration;

(5) the existence of a right to rectify or erase the personal data concerning you, a right to have the controller restrict the processing, or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data, if the personal data are not collected from the data subject;

(8) the existence of automated decision making including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Finally, you also have the right to request information about whether your personal data is transferred to a third country or to an international organization. In this case, you can obtain information about the appropriate guarantees according to. Art. 46 DSGVO in connection with the transfer.

You could assert your right to information at: info@adag.tv

2. right to rectification

If the personal data we process and which concerns you is incorrect or incomplete, you have a right to have it corrected and/or completed. The correction will be made immediately.

3. right to restriction

The right to restrict the processing of personal data concerning you may be exercised in the following cases:

(1) the accuracy of the personal data is contested for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and erasure of the personal data is refused, requesting instead the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defense of legal claims; or

(4) the data subject has objected to the processing pursuant to Art. 21 par. 1 DSGVO and it is not yet clear whether the legitimate reasons of the controller outweigh the reasons of the data subject.

If the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

In the event of a restriction of processing in accordance with the principles outlined, you will be informed by us before the restriction is lifted.

4. right to deletion

If the reasons outlined below apply, you may request that the personal data relating to you be deleted without delay. The responsible party is obliged to delete this data immediately. The reasons are:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) The processing is based on consent pursuant to. Art. 6 par. 1 lit. a or Art. 9 para. 2 lit. a DSGVO protected and you revoke consent. Another requirement is that there is no other legal basis for the processing.

(3) You object to the processing (Art. 21(1) DSGVO) and there are no overriding legitimate grounds for the processing. Another possibility is that you can lodge an objection to the processing pursuant to. Art. 21 par. 2 GDPR.

(4) The processing of personal data concerning you is unlawful.

(5) The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

(6) The personal data concerning you have been processed in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO collected.

If we have made the personal data relating to you public and we are required to do so pursuant to. Art. 17 par. 1 DSGVO, we shall take reasonable steps, including technical measures, to inform data controllers processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, such personal data, taking into account the available technology and the cost of implementation.

We would like to point out that the right to erasure does not exist insofar as the processing requires

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the field of public health pursuant to Art. 9 par. 2 lit. h and i and Art. 9 para. 3 GDPR;

(4) for archival purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to. Art. 89 par. 1 GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or

(5) to assert, exercise or defend legal claims.

5. right to information

If you have exercised the right to rectification, erasure or restriction of processing, we will be obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Furthermore, you have the right to be informed about these recipients.

6. right to data portability

According to the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance by the controller to whom the personal data was provided, provided that

  • the processing is based on consent pursuant to. Art. 6 par. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to. Art. 6 par. 1 lit. b DSGVO is based and
  • the processing is carried out with the help of automated procedures.

Finally, in the context of exercising the right to data portability, you have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible and does not adversely affect the freedoms and rights of other persons.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. We would like to point out that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

8. right of objection

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e or f DSGVO is carried out. The right to object also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling, insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You also have the possibility, in connection with the use of information society services (notwithstanding Directive 2002/58/EC), to exercise your right to object by means of automated procedures using technical specifications.

9. automated decision in individual cases including profiling

Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, there is an exception to this principle when the decision is

(1) is necessary for the conclusion or performance of a contract between you and the controller,

(2) is permitted by legislation of the Union or the Member States to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or

(3) is done with your express consent.

If the processing is carried out within the scope of the cases mentioned in (1) and (3), the controller shall take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests. This includes at least the right to obtain the intervention of a person on the part of the person responsible, to express his or her point of view and to contest the decision.

The decision under (1) – (3) shall not be based on special categories of personal data pursuant to Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

10. right to complain to a supervisory authority

Finally, if you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

VII Electronic contact

If you contact us, a contact form is available on our homepage, which you can use to contact us electronically. The data entered in the input mask will be transmitted to us and stored. These data are:

  • Your name
  • Your email address
  • Subject
  • Your message to us

The following data is also stored at the time the message is sent:

none

Furthermore, there is the possibility to contact us via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored.

Your data will not be passed on to third parties in this context; the data will be used exclusively for processing the communication recording.

The legal basis for the processing of the data, if the user has given his consent, is Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The processing of personal data in this context is solely for the purpose of processing the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

If further personal data is processed during the sending process, this is only used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

You have the possibility to revoke your consent to the processing of personal data at any time. You can also object to the storage of your personal data at any time when contacting us by e-mail. However, we would like to point out that in such a case the conversation cannot be continued.

You can revoke your consent and object to the storage. For this purpose, please send us an informal letter with the request to delete the personal data mentioned to adag Payroll Services GmbH, Gneisenaustraße 66, 10961 Berlin, or send us an e-mail to info@adag.tv.

All personal data stored in the course of contacting us will be deleted in this case.

VIII. Registration for an employment contract

You have the option to register online with adag Payroll Services GmbH by providing your personal data. The data is entered into an input mask, transmitted to us and stored. This data is forwarded to your respective employer, for whom we collect this data on their behalf and for their account. The data will not be passed on to third parties, with the exception of your employers. The following data is collected as part of the registration process for the creation of an employment contract:

  • Name
  • First name
  • Birth name
  • Date of birth
  • Birthplace
  • Country of birth
  • Street and house number of the place of residence
  • Postal code of the place of residence
  • Residence
  • Gender
  • Marital status
  • Nationality
  • Phone number
  • E-mail address
  • Health insurance with further details (place, family insurance, foreign insurance, insurance via KSK, private insurance and in this context the last statutory health insurance)
  • Social security number
  • Tax identification number
  • Bank details with IBAN and BIC
  • Information on the social security status
    1. Child / Pupil up to 15 years
    2. Minijob
    3. Employee (name and address of the company)
    4. Civil servant / pensioner
    5. Housewife / husband
    6. School leaver
    7. Unemployed
    8. Employee on parental leave
    9. Employee on unpaid leave
    10. Pupil from 16 years
    11. Apprentice
    12. Student
    13. Self-employed
    14. Freelancer/IN
    15. Pensioner/IN
    16. Student applicant and name of university
    17. Other social security status
  • job seeker, training place seeker, registered unemployed | no/yes, with
  • Benefits (ALG1, ALG2, Grundsicherung, Bedarfsgemeinschaft | no/yes, with
  • More than 3 months, 70 days short-term employment | no/yes, number of days
  • Receipt of ALG1, ALG2, basic income support in current calendar year | no/yes, period

The following data is also stored when the registration is completed:

  • The IP address of the user
  • Date and time of registration
  • The session ID
  • Operating system used
  • Browser used
  • Preferred browser language

The data is collected in connection with an employment relationship. The basis for this is your contractual agreement with a company that has commissioned us to record your master data for the employment contract, the preparation of the employment contract and the corresponding payroll accounting in the name of and on behalf of the relevant company. The digital collection of employment contract data is only optional for the user and in this case employee. The user always has the option not to have the aforementioned data collected via the digital procedure offered by adag Payroll Services GmbH, but to provide this instead via a paper employment contract before starting work.

After the user has agreed on a contract with the company that has commissioned us with the above-mentioned tasks, the user, in this case the employee, will receive an e-mail from adag Payroll Services GmbH with a link (one-time token) to log in. The user receives an SMS TAN for the login (two-factor authentication).

The data is stored on a separate server system, disconnected from the website data. Access to this server system is exclusively via encrypted connections (SSH/TLS).

During the registration process, we obtain your consent to the processing of this data, whereby the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO and Art. 6 para. 1 lit. b GDPR constitutes.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations. Premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

IX. Registration for the creation of team badges – adag BadgeTool

You have the option of registering online with adag Payroll Services GmbH, providing personal information, to create print templates for team badges. The data for the team badges are entered into an input mask, transmitted to us and stored. PDF print templates are created based on this data. Using these print templates, we or our cooperation partner (Herz Medical Group, Mario Schütz) create team badges for production employees. Data will not be passed on to third parties, with the exception of our cooperation partner (Herz Medical Group, Mario Schütz). The following data is collected as part of the registration process:

  • Name
  • First name
  • E-mail address

The following data may be collected as part of the artwork creation process:

  • Production name (AT)
  • Logo of the production company
  • Graphics for background design
  • Name of the production employee
  • First name of the production employee
  • Function of the production employee
  • Phone number of the production employee

The following data is also stored when the registration is completed:

  • The IP address of the user
  • Date and time of registration
  • Operating system used
  • Browser used
  • Preferred browser language

The aforementioned data is collected exclusively in connection with the creation of team badges.

After requesting the user to set up an account for the adag BadgeTool, the user receives a login created by adag Payroll Services GmbH (username by mail, password by SMS).

Access to the adag BadgeTool is exclusively via encrypted connections (SSH/TLS).

During the registration process, we obtain your consent to the processing of this data, whereby the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR constitutes.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations. Premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

X. Social media

1. integration of Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.

By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in section IV of this declaration will be transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also receive further information about your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. integration of YouTube videos

We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also receive further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

XI. Newsletter

1. general

As our customer, you can subscribe to a free newsletter with which we inform you about our current offers, the development of our digital products and processes, and current social security and payroll tax issues. The advertised offers, products and services are named in the declaration of consent.

We collect the following data on the basis of the consent obtained from you during the registration process: Last name, first name, e-mail address.

Your data will not be passed on in connection with data processing for the dispatch of newsletters. The data will be used exclusively for sending the newsletter.

2. double opt-in and logging

The registration for our newsletter takes place in a so-called double opt-in process. You will receive an email after registration asking you to confirm your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses.

Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address.

3. legal basis

The legal basis for the processing of the data, if the user has given his consent, is Art. 6 para. 1 lit. a GDPR. The collection of the user’s e-mail address is used to deliver the newsletter.

4. deletion, revocation and objection

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your e-mail address will be stored as long as the subscription to the newsletter is active. The subscription to the newsletter can be terminated by you at any time by revoking your consent. For this purpose, there is a corresponding link in every newsletter.

5. shipping service provider

We use CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organize and analyze newsletter distribution. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on CleverReach’s servers in Germany or Ireland.

Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Here, among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking /.

If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.