1. data protection at a glance
The following notes provide a simple overview of what happens to your personal information when you visit our website. Personal information is any information that personally identifies you. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
Data collection on our website
Who is responsible for data collection on this website? The data processing on this website is carried out by the website operator. Their contact data can be found in the imprint of this website.
How do we collect your data?
On the one hand, your data is collected by you communicating it to us. This may involve data that you enter in a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure that the website is error-free. Other data can be used to analyse your user behaviour.
What rights do you have with regard to your data?
You have the right at any time and free of charge to obtain information about the origin, recipient and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked or deleted. You can contact us at any time at the address given in the imprint for this as well as for further questions on the subject of data protection. Furthermore, you have the right to appeal to the responsible supervisory authority.
Analysis Tools and Tools from Third-Party Providers
When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy statement. You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration
2. General And MANDATORY INFORMATION
Reference to the responsible office
The responsible body for data processing on this website is:
Heartbeat Labs GmbH
10178 Berlin, Germany
Phone: +49 (0) 30 577025820
The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of appeal to the responsible supervisory authority
In the event of breaches of data protection law, the data subject shall have the right to lodge a complaint with the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data transferability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. Insofar as you have transferred the direct
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this and other questions on the subject of personal data.
3. data protection officer
Statutory data protection officer We have appointed a data protection officer for our company.
– Data Protection Officer –
4. data collection on our website
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a justified interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this data protection declaration.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Contents of the request (concrete page)
- Access status/HTTP status code
- amount of data transferred in each case
- Website from which the request originates
- Browser – operating system and its interface
- Language and version of the browser software.
- This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. f DSGVO.
- Eine Zusammenführung dieser Daten mit anderen Datenquellen wird nicht vorgenommen.
5. Social media
We do not use social media plugins or similar. Only a Twitter connection via PR.co is used for easier Twittering. However, no personal data is collected here.
6. analysis tools and advertising Google Analytics
This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Objection to data collection
Order data processing
We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics of Google Analytics
This website uses the function “demographic features” of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. This information cannot be associated with any specific individual. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit Google Analytics from collecting your data as described under “Objection to data collection”.
7. Plugins And Tools
Google Web Fonts
8. Data protection information for applicantS
Data protection information for applicants
We are pleased that you are interested in us and that you are applying or have applied for a job in our company. In the following, we provide you with information regarding the processing of your personal data in relation to your application.
Who is responsible for data processing?
The person responsible within the meaning of data protection law is :
10178 Berlin, Germany
You will find further information about our company, details of authorised representatives and other contact details in our imprint on our website:
Which data of yours are processed by us? And for what purposes?
We process the data you have sent us in relation to your application in order to assess your suitability for the position (or any other open positions in our company) and to complete the application process.
What is the legal basis for this?
The legal basis for the processing of your personal data in this application procedure is primarily § 26 BDSG in the version applicable from 25 May 2018. Accordingly, the processing of the data required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be necessary for legal prosecution after completion of the application procedure, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO. Our interest then lies in the assertion or defence of claims.
How long is the data stored?
Applicant data will be deleted after two years in the event of rejection.
In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after four years.
If you have been awarded a position as part of the application process, the data will be transferred from the applicant data system to our HR information system.
Which recipients will the data be passed on to?
We use a specialized software provider for the application process:
This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner.
Your applicant data will be viewed by the HR department after receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The rest of the process is then coordinated. In the company, only the persons who need your data for the proper course of our application procedure have access to them.
Where is the data processed?
The data is stored on servers of Lever Inc. in san Francisco.
Your rights as a “data subject”
You have the right to information about the personal data processed by us about your person.
In the case of a request for information which is not made in writing, we may then demand proof that you are the person you claim to be.
Furthermore, you have the right to correction or deletion or to restriction of the processing to the extent to which you are legally entitled to do so.
Furthermore, you have the right to object to the processing within the scope of the statutory provisions. The same applies to a right to data transfer.
Our data protection officer
We have appointed a data protection officer in our company. You can reach him under the following contact options:
– Data Protection Officer –
Right of appeal
You have the right to complain to a data protection supervisory authority about the processing of personal data by us.