DATA PROTECTION

Thank you for visiting our website. We would like to use this document to inform you how we process your personal data in connection with the use of our website.

Responsible
NESTONE GmbH
Middleway 22
20148 Hamburg
Phone: +49 40 822 233-400
Fax: +49 40 822 233-425

Questions about data protection and exercising your rights

If you have any questions about data protection or if you wish to exercise your data protection rights, please use the contact details provided above.

When do we process personal data

We process personal data that you actively transmit to us through your entries. We also automatically process personal data based on the use of our website. Your personal data may therefore be processed in the following cases in particular:

Visit our website;
Applying for a job;
Contacting us;
Defending against attacks on our technical infrastructure;

For details, please refer to the following explanations.

Visit our website

When you visit our website, the company we have commissioned to operate the website processes and stores technical information about the device you are using (operating system, screen resolution and other non-personal characteristics) and the browser (version, language settings), in particular the public IP address of the computer you are using to visit our website, including the date and time of access. The IP address is a unique numerical address under which your device sends or retrieves data from the Internet. We or our service provider do not usually know who is behind an IP address unless you provide us with data while using our website that enables us to identify you. Furthermore, a user may be identified if legal action is taken against them (e.g. in the event of attacks on our website) and we become aware of their identity as part of the investigation. So you generally do not need to worry that we can assign your IP address to you.

Our service provider uses the processed data for non-personal statistical purposes so that we can understand which end devices and settings are used to visit our website in order to optimize them if necessary. These statistics do not contain any personal data. The legal basis for the creation of the statistics is Art. 6 Para. 1 f) GDPR.

The IP address is also used so that you can technically access and use our website and to detect and ward off attacks against our service provider or our website. Unfortunately, there are always attacks to harm the operators of websites or their users (e.g. preventing access, spying on data, spreading malware (e.g. viruses) or other unlawful purposes). Such attacks would impair the intended functionality of the data center of the company we have commissioned, the use of our website or its functionality as well as the security of visitors to our website. The IP address and the time of access are processed to ward off such attacks. With this processing, we pursue the legitimate interest of ensuring the functionality of our website via our service provider and to ward off illegal attacks against us and visitors to our website. The legal basis for the processing is Art. 6 Para. 1 f) GDPR.

The stored IP data is deleted (through anonymization) when it is no longer needed to detect or defend against an attack.

Applications

We are always happy to welcome new colleagues! If you apply for one of the positions we offer or apply on your own initiative, we will process your data to carry out the application process and to decide whether to establish an employment relationship. The legal basis for processing is Section 26 of the Federal Data Protection Act (BDSG) and, subordinately, Art. 6 (1) f. of the GDPR.

If we unfortunately do not consider your application, we will delete your application and the documents you have submitted two months after our rejection, unless further storage is in our legitimate interest in order to be able to prove compliance with our legal obligations, e.g. under the General Equal Treatment Act (AGG). In this case, the data will be deleted when the reason no longer applies. The legal basis for further storage is Section 26 BDSG and, secondarily, Art. 6 (1) f) GDPR.

You can object to the further processing of your data at any time by withdrawing your application.

If we establish an employment relationship with you, you will receive separate information about the processing of your data and the rights to which you are entitled.

Contact requests

If you send us a message using one of the contact options offered, we will use the data you provide to process your request. The legal basis for this is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 f) GDPR. If your request serves to conclude or execute a contract with us, another legal basis for processing is Art. 6 Para. 1 b) GDPR. The data will be deleted after your request has been processed. If we are legally obliged to store the data for a longer period, it will be deleted after the corresponding period has expired.

Youtube

We have embedded YouTube videos on our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

YouTube videos are embedded in our portal exclusively on the basis of YouTube's "Extended Privacy Mode". According to YouTube, it only stores information about visitors to a website if they click on and play the video. You can find more information on this at https://support.google.com/youtube/answer/171780?hl=de in the "Activate Extended Privacy Mode" section.

Playing videos involves a significant amount of data, especially when different visitors to the website watch videos at the same time. Furthermore, the playback of videos is accelerated and their playback quality is improved if they are played from a server that is as close as possible to the website visitor. We cannot guarantee this ourselves due to the considerable technical effort involved. We have therefore embedded the videos using YouTube. The legal basis for this is Art. 6 Para. 1 f GDPR.

Google Fonts

We use Google Fonts to display our website. This is a collection of fonts offered by Google Ireland Limited, https://www.google.de/contact/impressum.html (“Google”). When your device accesses the font used on our website, the public IP address of the device you are using is transmitted to Google. The IP address is a unique numerical address under which your device sends or retrieves data from the Internet. When you access our website, your device loads the fonts required to correctly display our offer in order to display them as we intended. If your device does not support web fonts, a standard font from your device will be used to display our website. You can find more information about Google Fonts at https://developers.google.com/fonts/faq .
Google Fonts is subject to Google's general privacy policy, which can be accessed at https://www.google.com/policies/privacy/ . Our legitimate interest in using Google Webfonts is to ensure that the website has a uniform appearance and thus that it functions on all devices. The legal basis for processing is therefore Art. 6 Para. 1 f. GDPR.

Google Maps

To visually represent where our company is located, we use a map from Google Maps, a service of Google Ireland Limited, https://www.google.de/contact/impressum.html (“Google”).
When you access the map using your device, the public IP address of the device you are using is transmitted to Google. The IP address is a unique numerical address that your device uses to send or retrieve data from the Internet.
Google Maps is subject to Google’s privacy policy, which is available at https://www.google.com/policies/privacy/ .
Our legitimate interest in using Google Maps is to help visitors to our website find our company so that we are easier to reach. The legal basis for processing is Art. 6 Para. 1 f. GDPR.

Use of cookies

We use cookies to operate our website and to understand how visitors use our website.

A cookie is a small text file that is stored on your device when you visit our website. When you visit our website again later, cookies can be read again. Cookies are stored for different lengths of time. You can set which cookies should be accepted in your browser at any time, but this may mean that our website no longer works properly. You can also delete cookies yourself at any time.
We use analysis cookies to analyse your user behaviour. For details, please read the information on “Google Analytics”.

Most browsers that our users use allow you to set which cookies should be saved and to delete (certain) cookies. If you restrict the saving of cookies to certain websites or do not allow cookies from third-party websites, it may mean that our website can no longer be used to its full extent. Here you can find information on how to adjust the cookie settings for the most common browsers:

Google Chrome ( google.com/chrome/answer/95647?hl=en )

Internet Explorer ( https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies )

Firefox ( https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen )

Safari ( https://support.apple.com/kb/PH21411?locale=en_US )

Google Analytics

As part of order processing, we use Google Analytics, a service provided by Google Ireland Limited, https://www.google.de/contact/impressum.html . Google uses cookies as a processor for this purpose. A cookie is a small text file that is stored on your device by your browser. Using cookies, Google receives information about which website you have visited, technical information about the device you are using (e.g. browser type/version, operating system used, operating system and browser) and, in anonymized form, the public IP address of the device you are using. For Google Analytics, your IP address is only used in anonymized form. For details, please refer to Google's privacy policy, available at https://support.google.com/analytics/answer/6004245?hl=de and information about the so-called IP mask at https://support.google.com/analytics/answer/2905384/ . Google Analytics allows us to create usage statistics for our website in a non-personal form, as well as demographic data about visitors and their user behavior. Furthermore, statistics are created that help us better understand how our website is found in order to improve our search engine optimization and our advertising measures. With this processing, we pursue the legitimate interest of being able to improve our website and our advertising measures. The legal basis for the processing is Art. 6 Para. 1 f) GDPR. You can find information on how you can object to the use of Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de .

If you click to deactivate Google Analytics here, a cookie will be stored in your browser that allows you to object to the use of Google Analytics while using Nest-one.com. The opt-out only applies to the browser you are currently using. If you delete the cookie, you must opt out again.

Google is based in the European Union. If data is transferred to Google companies in the USA for the purposes of Google Analytics, these companies are members of the Privacy Shield Agreement. The pseudonymous data is deleted after 26 months.

Right to information

According to Art. 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you have the right to information about this personal data and to further information specified in Art. 15 GDPR.

Right to rectification

According to Art. 16 GDPR, you have the right to request that we immediately correct inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed - also by means of a supplementary statement.

Right to erasure

You have the right to request that we delete personal data concerning you immediately. We are obliged to delete personal data immediately if the relevant requirements of Art. 17 GDPR are met. For details, please refer to Art. 17 GDPR.

Right to restriction of processing

According to Art. 18 GDPR, under certain circumstances you have the right to request that we restrict the processing of your personal data.

Right to data portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have made available to us in a structured, common and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR and the processing is carried out using automated procedures.

Right to object

According to Art. 21 GDPR, you have the right to object to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

If you wish to exercise any of the rights to which you are entitled, please contact us as the controller using the contact details provided above or use one of the other methods we offer to send you this communication. If you have any questions about this, please contact us.

Existence of a right of complaint to the supervisory authority

According to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right to complain to the supervisory authority. This right exists in particular in the Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.