General Privacy Policy nexnet

General Privacy Policy of Subscription Billing

1. Name and Contact Data of the Data Controller according to Article 4 Paragraph 7 GDPR
The data controller for these internet pages is nexnet GmbH (Linkstr. 2, 10785 Berlin). Further information on our company, on the editorial responsibility, and on the authorized representatives can be found in our legal notice.

2. Data Protection Officer
We have appointed a data protection officer. The data protection officer can be contacted as follows:
nexnet GmbH
-Data Protection Officer –
Postfach 303220
10729 Berlin
E-Mail: datenschutz@nexnet.de

3. Legal Grounds of the Data Processing
In order to be able to provide you with our internet site and the services connected to it, we process personal data on the basis of the following legal grounds:

  • Consent (Article 6 Paragraph. 1. Lit. a) GDPR)
  • for the performance of contracts and for answering pre-contractual requests (Article 6 Paragraph. 1. Lit. b) GDPR)
  • For compliance with a legal obligation (Art. 6 Para. 1 lit. c) GDPR)
  • On the basis of a balancing of interests (Article 6 Paragraph 1 lit. f) GDPR)

4. Categories of Affected Persons

  • Users
  • Applicants
  • Interested parties

5. Types of Processed Data

  • Inventory data (e.g. personal-inventory data, names or addresses).
  • Contact data (e.g. e-mail, telephone numbers).
  • Anonymous user data (e.g. websites visited, interest in content, access times).
  • Access data (e.g. device information, IP-addresses ).

5.1. The Access Data
The following data are processed in order to be able to display the content of the internet site on your end device. For this purpose and in this interest the following data are logged on the basis of a balancing of interests:

  • Directory protection user
  • Date and time
  • Accessed pages
  • Logs
  • Status code
  • Data volume
  • Referrer
  • User agent
  • Accessed hostname.
  • IP-address of the calling computer (for maximum of 60 days)

The IP-address is saved in anonymized form and deleted following 60 days at the latest from all systems that are used in connection with the operation of these internet pages. We can no longer establish a connection to a person with the remaining data.

The data are also used in order to be able to investigate and correct errors on the internet pages.

6. Purposes of the Processing of Personal Data
We process the above-mentioned data for the operation of our internet site and for the meeting of contractual obligations in respect of our customers, or for the protection of our legitimate interests. In the case of requests by you outside of an active customer relationship, we process your data for the purposes of sales. On no account do we process your data for advertising or profiling.

7. Provision of the Online Offering
In order to provide you with the local service, we make use of the services of various infrastructure and platform service providers. They can collect data, e.g. call time, referrer URL and mainly also the IP addresses. The collection of these data primarily serves the security and thus the legitimate interest of the provider. You will find more information via the links given.

7.1. Webhosting
Our domain is hosted via Mitttwald CM Service GmbH & Co. KG.

7.2. Platform / CMS
For the presentation we use the open source product WordPress:

  • Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Irland
  • Data protection: https://automattic.com/de/privacy/

8. Recipient / Forwarding of Data
As a rule, forwarding of your data does not take place, in particular not for commercial purposes.

It is possible, however, that your data will be disclosed to third parties. This shall only occur, however, on the basis of legal permission, if as a user, you have consented to this, a legal obligation to do this exists, or on the basis of our legitimate interest (e.g. the use of web hosts).

Data processing outside of the European Union (EU) does not take place as a rule. We cannot, however, exclude the possibility of data being routed via internet servers outside the EU. This can be the case in particular if the participants of an “online meeting” are in a third country.

Insofar as we process data in a third country (i.e. outside of the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or insofar as this takes place in the context of the use of third party services or of disclosure or transmission of data to other persons or companies, this shall take place only if it occurs for the performance of our (pre-) contractual obligations, or on the basis of your consent, on the basis of a statutory duty, or on the basis of our legitimate interests. Subject to express consent or contractually required transmission, we process or leave the data only in third countries with a recognized data protection level, to which belong the US processors certified under the “Privacy Shield”, or which process on the basis of special guarantees, such as contractual obligation through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection provisions (Art. 44-49 GDPR , information page of the EU Commission).Information pages of the EU Commission).

9. Contact and Information Channels
On our website we offer a variety of ways of contacting us if you would like to request information on our products or services. Only those data that are necessary for responding to your request are marked as mandatory fields. All other information is voluntary. Requests that are made via the contact form are processed centrally and electronically. The data processing takes place in the case of concrete requests for the performance of a contract or contract initiation. In the case of general requests, the processing takes place on the basis of a balancing of interests. The transmission of the form-data via the internet takes place via encrypted connections.

The following contact and information channels are available to you:

9.1. Call-back & and other commercial communication by telephone
You have the possibility of requesting us to call you back so that you may receive further information on our products and services.

You can opt out of this at any time. Where applicable, we will place your data on a blocking list for up to three years in order to be able to document the granting of consent and the opt-out.

9.2. Newsletter
You have the possibility of subscribing to a free newsletter. For this purpose, we require that you provide us with your e-mail address and your name.
If you register for our newsletter via our website, we use the double opt-in procedure. This means that on registration, you will have to confirm the order again by clicking on a link in an e-mail sent by us to you. The legal basis for the processing in this case is Art. 6 Para. 1 lit. a) GDPR, on your voluntarily submitted consent. This can be withdrawn at any time.
If you receive the newsletter as our customer, we do this on the basis of § 7 Abs. 3 UWG (German Unfair Competition Act). In this case, too, you can withdraw your consent at any time.

For our newsletter we use only an anonymized counting of the click rates.
Our newsletter is sent via the service provider„Newsletter2Go“ (Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin; www.newsletter2go.de/datenschutz/).

9.3. Downloading our White Paper
You also have the possibility to download our White Paper. To do so, please fill in the relevant form and click on the corresponding field. You will then receive an e-mail with the download link.

9.4. Opt-out
You can opt out of the above-mentioned uses with future effect at any time by means of an informal an informal declaration to nexpress@nexnet.de. If you receive the newsletter, you can also do this by clicking on the unsubscribe link at the end of each e-mail. Please note that the processing of your opt-out may take up to two working days and that in this time the sending of a further newsletter may take place. Where applicable, we will place your data on a blocking list for up to three years in order to be able to document the granting of consent and the opt-out.

10. Your Rights as an Affected Person

You have the right:

  • pursuant to Art. 15 GDPR, to demand information on the data of yours which is processed by us. This includes, in particular, information on the processing purposes, the categories of recipients to whom your data are disclosed, the planned storage duration, the existence of a right of correction, deletion, restriction of the processing or objection, the existence of a right of complaint, the origin of your data, insofar as these were not collected by us;
  • pursuant to Art. 16 GDPR, immediately to demand the correction of inaccurate or incomplete persona data of yours that is stored by us;
  • pursuant to Art. 17 GDPR, to demand the deletion of your personal data stored by us insofar as these are not required for the exercise of the right to free expression and information, for the meeting of a legal obligation, for reasons of the public interest or for the assertion, exercise or defence of legal claims , or does not conflict with the statutory provisions;
  • pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data, if the correctness of the data is disputed by you, if the processing is unlawful, if you instead of deletion demand a restriction, if you refuse and we no longer need the data, but you nevertheless need them for the assertion, exercise or defence of legal claims, or if you have lodged and objection pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, you demand to receive the personal data you have provided us with in a structured, accessible and machine-readable format or demand they be transferred to another responsible party;

pursuant to Art. 7 Para. 3 GDPR, to cancel at any time the consent you granted to us, such that we are no longer allowed to continue the data processing connected to this consent in the future, and pursuant to Art. 77 GDPR, to complain to a supervisory authority.

 

Right of Objection
You have the right, pursuant to Art. 21 GDPR, to lodge an objection to the processing of your personal data by us. This shall apply in particular insofar as, pursuant to Art. 21 GDPR, your personal data are processed on the basis of legitimate interests. Pursuant to Art. 6 Para. 1S lit. f) GDPR, insofar as reasons exist that arise from your particular situation. If you would like to make use of your right of cancellation or right of objection, an e-mail to info@nexnet.de shall suffice.

11. Duration of Storage
Your data will only be stored as long as is necessary for the respective purpose and as prescribed by law. As soon as the legal basis for the processing has lapsed, we shall thus delete all of the data in accordance with the statutory regulations.

12. Analytical Tools
We use the following analytical tools:

12.1. Cookies
Cookies are used on our internet pages. Cookies are small pieces of text data that are saved on your end device via your browser. The cookies are necessary in order to enable particular functions of our internet pages.

We use both session cookies, which are immediately and automatically deleted from your browser when you leave our internet pages. In the area of web analytics, however, we also use so-called persistent cookies, which are not automatically deleted when you leave our internet pages.

You have the possibility to prevent the use of cookies through appropriate settings on your browser. Please note, however that the use of our internet pages may then only be possible in a restricted sense. No programmes or other applications are started or installed on your computer through cookies.

The following cookie types and functions exist:

  • Temporary cookies / session-cookies: these cookies are needed exclusively for the current session and are deleted at the latest as soon as the browser is closed.
  • Persistent cookies: persistent cookies remain saved even after the closing of the browser, in order, for example to save different settings.
  • First-party cookies: these cookies are used exclusively by us.
  • Third-party cookies: third-party cookies are used by other providers (third parties). These often involve analytics or advertising.
  • Necessary cookies: These cookies are absolutely necessary for the operation of the respective website and thus cannot be saved without consent. The use of cookies takes place on the basis of a balancing of interests. Our interest lies in the user-friendly visiting of our internet pages.
  • Statistical cookies / marketing cookies: The possibility also exists that statistical data will be gathered via cookies for marketing purposes. This includes, for example, range measurement and other data for the recording of your interests (tracking). These cookies are only used if you expressly consent to them.
Cookie Name Duration Category Description
fe_typo_user Persistent Stores the user’s cookie consent state for the current domain. This cookie stores the state that the user selected for cookie_consent. It is necessary in order to retrieve this.
_ga 2 years This analysis cookie is only used if you expressly agree to it. Google Analytics: Used to differentiate between users.
_gat 1 minute This analysis cookie is only used if you expressly agree to it. Google Analytics: Used to throttle the demand rate. If Google Analytics is provided by Google Tag Manager, this cookie is called _dc_gtm_property-id.
_gcl_au 3 months This analysis cookie is only used if you expressly agree to it. Used by Google AdSense in order to test the efficiency of the advertising on websites that use your services.
_gid 24 hours This analysis cookie is only used if you expressly agree to it. Used to differentiate between users.
_pk_id.* 1 month This analysis cookie is only used if you expressly agree to it. This cookie is used in order to determine the behaviour of the visitors to the website. It is used in order to gather statistics on the use of the website, for example the time of the last visit to the website. The cookie does not contain any personal data and is only used for the purpose of website analysis.
_pk_ses.* 30 minutes This analysis cookie is only used if you expressly agree to it. This cookie is used in order to determine the behaviour of the visitors to the website. It is used in order to gather statistics on the use of the website, for example the time of the last visit to the website. The cookie does not contain any personal data and is only used for the purpose of website analysis.
Cookie Name Ablaufzeit Kategorie Beschreibung
cookieconsent_status Persistent Notwendig, ein Setzen ist ohne gesonderte Einwilligung notwendig. Durch diesen Cookie ihn wird der Status die/ der User/In beim cookie_consent gewählt hat. Ist notwendig um das abzufragen
_ga 2 Jahre Dieser Analysecookie wird nur gesetzt, wenn Sie dem ausdrücklich zustimmen. Google Analytics: Wird zur Unterscheidung von Benutzern verwendet.
_gat 1 Minute Dieser Analysecookie wird nur gesetzt, wenn Sie dem ausdrücklich zustimmen. Google Analytics: Wird zum Drosseln der Anforderungsrate verwendet. Wenn Google Analytics über Google Tag Manager bereitgestellt wird, wird dieses Cookie _dc_gtm_property-id genannt.
_gcl_au 3 Monate Dieser Analysecookie wird nur gesetzt, wenn Sie dem ausdrücklich zustimmen. Wird von Google AdSense verwendet, um die Effizienz der Werbung auf Websites, die ihre Dienste nutzen, zu testen.
_gid 24 Stunden Dieser Analysecookie wird nur gesetzt, wenn Sie dem ausdrücklich zustimmen. Wird zur Unterscheidung von Benutzern verwendet.
_pk_id.* 1 Monat Dieser Analysecookie wird nur gesetzt, wenn Sie dem ausdrücklich zustimmen. Dieses Cookie wird genutzt, um das Verhalten der Besucher auf der Website festzuhalten. Es wird genutzt, um Statistiken über die Websitenutzung zu sammeln wie zum Beispiel den Zeitpunkt des letzten Besuches auf der Website. Das Cookie enthält keine personenbezogenen Daten und wird einzig für die Websiteanalyse eingesetzt.
_pk_ses.* 30 Minuten Dieser Analysecookie wird nur gesetzt, wenn Sie dem ausdrücklich zustimmen. Dieses Cookie wird genutzt, um das Verhalten der Besucher auf der Website festzuhalten. Es wird genutzt, um Statistiken über die Websitenutzung zu sammeln wie zum Beispiel den Zeitpunkt des letzten Besuches auf der Website. Das Cookie enthält keine personenbezogenen Daten und wird einzig für die Websiteanalyse eingesetzt.

Essential

Essential cookies enable basic functions and are necessary for the proper function of the website.

Statistics

Statistics cookies collect information anonymously. This information helps us to understand how our visitors use our website.

Google Analytics

NameGoogle Analytics
ProviderGoogle LLC
PurposeCookie by Google used for website analytics. Generates statistical data on how the visitor uses the website.
Purposehttps://policies.google.com/privacy?hl=en
Cookie Name_ga,_gat,_gid
Cookie Expiry2 Years

Google Tag Manager

NameGoogle Tag Manager
ProviderGoogle LLC
PurposeCookie by Google used to control advanced script and event handling.
Purposehttps://policies.google.com/privacy?hl=en
Cookie Name_ga,_gat,_gid
Cookie Expiry2 Years

Marketing

Marketing cookies are used by third-party advertisers or publishers to display personalized ads. They do this by tracking visitors across websites.

External Media

Content from video platforms and social media platforms is blocked by default. If External Media cookies are accepted, access to those contents no longer requires manual consent.

Google Maps

NameGoogle Maps
ProviderGoogle
PurposeUsed to unblock Google Maps content.
Purposehttps://policies.google.com/privacy?hl=en&gl=en
Host(s).google.com
Cookie NameNID
Cookie Expiry6 Month

Instagram

NameInstagram
ProviderFacebook
PurposeUsed to unblock Instagram content.
Purposehttps://www.instagram.com/legal/privacy/
Host(s).instagram.com
Cookie Namepigeon_state
Cookie ExpirySession

OpenStreetMap

NameOpenStreetMap
ProviderOpenStreetMap Foundation
PurposeUsed to unblock OpenStreetMap content.
Purposehttps://wiki.osmfoundation.org/wiki/Privacy_Policy
Host(s).openstreetmap.org
Cookie Name_osm_location, _osm_session, _osm_totp_token, _osm_welcome, _pk_id., _pk_ref., _pk_ses., qos_token
Cookie Expiry1-10 Years

Vimeo

NameVimeo
ProviderVimeo
PurposeUsed to unblock Vimeo content.
Purposehttps://vimeo.com/privacy
Host(s)player.vimeo.com
Cookie Namevuid
Cookie Expiry2 Years

YouTube

NameYouTube
ProviderYouTube
PurposeUsed to unblock YouTube content.
Purposehttps://policies.google.com/privacy?hl=en&gl=en
Host(s)google.com
Cookie NameNID
Cookie Expiry6 Month
Datenschutzeinstellungen öffen

12.2. Google Analytics
On this website, the web analytics tool “Google Analytics” is used, which is provided as a service by Google Ireland Limited. The purpose of this use is the “needs-based design” of this internet site, which is carried out on the basis of a balancing of interests. The web analytics also enable us to identify errors on the internet site, e.g. due to defective links, and to correct these. Google Analytics uses so-called “cookies”.  This involves the use of so-called “client IDs”, which serve the creation of pseudonymous user profiles, which together record the use of the internet pages by a user via desktop computers and mobile end-devices.

The information generated on your use of this website by the cookies is, as a rule, transmitted by Google to a server in the USA and stored there. As we have activated so-called IP-anonymizing on this website, and concluded a related order processing contract with Google, your IP address will, however, be abridged before this by Google within member states of the European Union or in other contracting member stats of the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be transmitted to the USA and abridged there.

12.3. Deactivating Google Analytics (Opt-Out)

As an alternative to the browser add-on, please click this link within browsers on mobile devices in order to prevent future detection by Google Analytics within this website.

  • The Opt Out works only in this browser and only for this Domain
  • An opt-out cookie is stored on your device.
  • If you are divulging your cookies in this browser, you must click this link again.

More detailed information on the conditions of use for Google Analytics and on data protection policies can be found here: https://policies.google.com/privacy

12.4. Google Tag Manager
On this website we use “Google Tag Manager”. Google Tag Manager is a solution with which we are able to administer so-called website tags via an interface (and thus, e.g. integrate Google Analytics and other Google marketing services into our online offerings). The Tag Manager itself (which implements the tags) does not process any personal data of the user. With regard to the processing of personal data of the user, please consult the following information on the Google services: User Guidelines: www.google.com/intl/de/tagmanager/use-policy.html.

12.5. Google Ads
With the aid of Ads, we can determine the reach and success of our advertisements. This involves the recording, by means of a cookie with restricted validity, of when you have clicked on an advertisement activated by Google, and as a result have arrived at our website.

12.6. Google reCAPTCHA
To avoid span and to ensure the secure transmission of messages, we use Google reCAPTCHA for our contact form. This tool enables us to distinguish whether an entry is being made by a person or by a machine. The use thus takes place on the basis of our legitimate interest (Article 6, Paragraph 1 lit. f) GDPR.

12.7. Date on Google in Brief (on Points 11.1 to 11.6):

12.8. Adobe Typekit
On our internet pages we integrate external scripts of Typekit. Typekit is a service provided by the company Adobe. The integration of these web fonts takes place via a server call at Adobe (in the USA). Information on types of data that are retrieved in doing so and the purposes of the processing can be found in the data protection notice of Typekit.

12.9. Matomo
We use Matomo for reach measurement. We also apply cookies in our user profiles in this case. These include _pk_id.* and _pk_ses.* The data saved with the aid of cookies are only stored on our server and not forwarded to third parties. The maximum storage period is 13 months. You can opt out of the use at any time with future effect.

13. Social Media
You will also find us on social media. Here it may be the case that data are processed outside the jurisdiction of the GDPR, something that may impede the enforcement of your rights, and your data may be used by the operators of the social networks themselves for their own purposes (e.g. advertising). In this context, the operators of social networks typically process the following data: Inventory and contact data (e.g. name, address, e-mail, telephone numbers), use data (e.g. websites visited, access data), content data (e.g. text and image data), meta/communication data (e.g. device data, IP addresses). You can find more information on this here. The details of the individual uses can be found in the in the respective data protection notices of the operators. We use the following networks:

13.1. Twitter
Twitter is a short messaging service with which we make many technically-related announcements to a wide audience:

13.2. Videos on YouTube
On our internet pages we also link to video content on YouTube. YouTube is provided as a service by Google Ireland Limited. The inclusion of YouTube videos involves accessing Google servers located in the USA. The processing of personal data on Google servers is carried out by Google. In this respect we refer you to Google’s data protection policy: policies.google.com/privacy The date processing takes place on the basis of a balancing of interests, where our interest consists in linking to informational content in video form on the website.

13.3. Facebook
Facebook is a social network on which both the net group and nexnet itself maintain a profile.:

13.4. LinkedIn
LinkedIn is another social network on which nexnet maintains a profile: Service provider:

13.5. Xing
Xing is a social network based in Germany.

14. Further Offerings
In the following you will find information on our further offerings. This may involve offerings whose data is processed in countries outside the European Union. We also point out the tracing and marketing possibilities, by means of which the platforms can create user profiles

14.1. Leaflet
We use leaflet for the presentation of maps. Leaflet is an open-source JavaScript library for mobile, interactive maps. More information can be found at leafletjs.com.

14.2. Online Meetings with Blizz
We use the tool “Blizz” to carry out teleconferences, online meetings, video conferences and/or webinars (hereinafter: “online meetings”. “Blizz” is a service of Team Viewer Germany GmbH from Germany.

Note: Insofar as you visit the website of “Blizz”, the provider of “Blizz” is responsible for the data processing. However, visiting the website is only necessary for the purpose of downloading the software that enables “Blizz” to be used. If you cannot or do not want to use the “Blizz” app, the basic functions are useable via a browser version, which you will also find on the “Blizz” website.

When “Blizz” is used, various types of data are processed. The scope of the date involved here depends on what details on data you provide prior to or during participation in an “online meeting”.

The following personal information are processed:

Information on the user: Username, display name, e-mail address, profile picture (optional), preferred language.

Meeting-metadata: Meeting ID, participants’ IP addresses, telephone numbers, place,

Text, audio, and video data: Where applicable, you have the possibility to use the chat function in an “online meeting”. In this respect, the text data you enter will be processed in order to display them in the “online meeting”. In order to enable the showing of video and the playing of audio, the data from your end device’s microphone will be processed for the duration of the meeting. You can turn off the camera or mute the microphone yourself via the “Blizz” applications at any time.

We use “Blizz” to carry out “online meetings”. When we intend to record “online meetings”, we will communicate this in a transparent manner in advance and – insofar as this is necessary – request consent.

If it is necessary for the purposes of minuting the results of an “online meeting”, we will minute the chat contents. This will not normally be the case, however.

An automated decision according to Article 22 GDPR will not be used.

Insofar as personal data by staff of nexnet GmbH are processed, the basis of the processing will be § 26 of the German Federal Data Protection Act (BDSG). If, in the context of the use of “Blizz”, personal data are not necessary for the founding, implementation, or ending of the employment relationship, but are at the same time elementary components of the use of “Blizz”, Article 6, Paragraph 1 lit. f) GDPR shall form the legal basis for the data processing. Our interest in these cases consists in the effective carrying out of “online meetings”.

Otherwise, the legal basis for the processing of data in the carrying out of meetings is Article 6, Paragraph 1 lit. b) GDPR, insofar as meetings are carried out in the context of contractual relationships.

If no contractual relationship exists, the legal basis will be Article 6, Paragraph 1 lit. f) GDPR. Here too, our interest consists in the effective carrying out of “online meetings”.

Personal data that are processed due to participation in “online meetings” are as a rule not forwarded to third parties, insofar as they have not been designated for transfer. Please note that, as with personal meetings, the content of “online meetings” often serve the communication of information with customers, interested parties or third parties, and are thus designated for transfer.

Further recipients: The provider of “Blizz” shall necessarily receive the above mentioned data, insofar as this is provided in the context of our data processing agreement with “Blizz”.

During their transmission via the internet the data are encrypted and thus protected from unauthorized third-party access.

15. Links to other Websites
Our online offerings contain links to other websites. We have no influence on whether their operators comply with the data protection provisions .

16.Date Protection Notices in Application Procedures
Documents of applicants generally comprise the data that are necessary for the assessment and selection, which arises from the job advertisement or is communicated separately. The documents will only be stored for as long as this is necessary in the context of the hiring process.

17. (Technical) Security Measures:
Your data are saved by us by means of appropriate technical and organizational security measures, and protected from accidental or intentional manipulation, partial or complete loss, destruction, or from unauthorized third-party access. The measures reflect the state of the art.

For the encryption we use an SSL encryption. You can identify whether or not a website is transmitted in encrypted form through the depiction of the key, or the closed key-symbol in the status bar of your browser.

18. Change to the Data Protection Notice
We revise this data protection notice in the event of changes to the data processing or for other reasons that make this necessary. The currently valid version can always be found on this website.

 

As of 29 July 2020