Thank you for visiting our website. With this document, we would like to inform you about how we process your personal data in connection with the use of our website.
Liable Entity
NEST ONE GmbH
Mittelweg 22
20148 Hamburg
Phone: +49 40 822 233-400
Fax: +49 40 822 233-425
Questions about data protection and the exercise of your rights
For questions about data protection or the exercise of your data protection rights, please get in touch with us using the above contact information.
For questions about data protection or the exercise of your data protection rights, please get in touch with us using the above contact information.
We process personal data that you actively submit to us through your input. Furthermore, we automatically process personal data due to the use of our website. In particular, your personal data may be processed in the following situations:
- If you visit our website;
- If you apply for a job with us;
- If you establish contact with us;
- Defense against attacks against our technical infrastructure;
Please refer to the following explanations for further details.
Visiting our website
When you access our website, the company commissioned by us to operate the website processes and stores technical information about the end device you are using (operating system, screen resolution and other non-personal features) and the browser (version, language settings) as well as the public IP address of the computer you are using to visit our website, together with the date and time of access. The IP address is a unique numeric address through which your end device sends data to or retrieves data from the internet. As a rule, we or our service provider do not know who is behind an IP address unless you provide us with data during the use of our website that enables us to identify you. A user may also be identified if legal action is taken against him or her (e.g. in the event of attacks against our website) and we gain knowledge of his or her identity as part of the investigative proceedings. As a rule, you do not have to worry that we will be able to match your IP address to you as an individual.
Our service provider uses non-personal data that has been processed so that we can track which end devices with which settings are used to visit our website and, if necessary, to optimize it for that device. These statistics do not contain any personal data. The legal basis for compiling the statistics is Art. 6 Para. 1 (f) of the EU General Data Protection Regulation (GDPR).
The IP address is also used so you can access and use our website technically as well as to recognize and defend against attacks on our service provider or us. Unfortunately, there are frequent attacks that harm the operators of websites or their users (for example, by preventing access, spying on data, spreading malware (e.g. viruses) or through other illegal purposes). Such attacks would hinder the proper functioning of the server center of the company that we commission, the use of our website or its functionality and the security of visitors to our website. The processing of the IP address including the time of access is undertaken to prevent such attacks. The processing of this data is undertaken to secure our legitimate interest through our service provider of ensuring the functionality of our website and to fend off illegal attacks against us and visitors to our website. The legal basis for the processing of that data is Article 6 Para. 1 (f) of the GDPR.
The stored IP data is deleted (through anonymization) when it is no longer needed for the detection of or defense against an attack.
Job applications
We are always pleased to welcome new coworkers! If you apply for one of the positions listed by us or submit your application absent a job announcement, we will process your data for the sole purpose of the application process and for the decision-making process on whether to establish an employment relationship. The legal basis for the processing of that data is § 26 of the German Federal Data Protection Act (BDSG) and subordinately Art. 6 Para. 1 (f) of the GDPR.
Should your application not lead to a job offer, we will delete your application together with the documents submitted within two months after our rejection, provided that further storage is not in our legitimate interest, such as enabling us to prove compliance with our statutory obligations, e.g. under the General Equal Treatment Act (AGG). In this case, erasure will take place as soon as there is no longer a reason for further storage. The legal basis for further storage is § 26 BDSG and subordinately Art. 6 Para. 1 (f) of the GDPR.
By withdrawing your application, you can opt out of the further processing of your data at any time.
If we do establish an employment relationship with you, we will provide separate information about the processing of your data and the rights to which you are entitled.
Contact requests
If you send us a message using one of the contact options offered, we will use the data you provide us with to process your request. The legal basis for this is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 (f) of the GDPR. If your inquiry serves the implementation or establishment of a contract with us, the further legal basis for the processing of your data is Art. 6 Para. 1 (b) of the GDPR. The erasure of the data will be completed once your request has been processed. If we should be legally obligated to extend the period of storage, the erasure will take place after expiry of the period in question.
Youtube
We incorporate YouTube videos on our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
YouTube videos are embedded in our portal exclusively on the basis of YouTube’s “privacy enhanced mode.” According to YouTube, it only stores information about visitors to a website when they click on the video and play it. For further information, please visit https://support.google.com/youtube/answer/171780?hl=en and review the section labeled “privacy enhanced mode.”
The playback of videos involves considerable amounts of data, especially when different visitors to the website are watching videos at the same time. In addition, the playback of the videos is faster and the playback quality better if the videos are played from a server that is as close as possible to the visitor of the website. We cannot guarantee video services ourselves due to the considerable technical effort required and, as such, rely on YouTube for the integration of videos. The legal basis for this is Art. 6 Para. 1 (f) of the GDPR.
Google Fonts
We use Google Fonts, a collection of typefaces provided by Google Ireland Limited, https://www.google.de/contact/impressum.html (“Google”), for the display of our website. When your end device retrieves the font used on our website, the public IP address of the end device you are using is transmitted to Google. The IP address is a unique numeric address through which your end device sends data to or retrieves data from the internet. When you access our website, your device loads the fonts needed to correctly display our website in the way that we intended. If your end device does not support web fonts, a standard font on your end device will be used to display our website. Further information about Google Fonts can be found at https://developers.google.com/fonts/faq .
Google Fonts is subject to Google’s general privacy policy, which is available at https://www.google.com/policies/privacy/ . It is our legitimate interest to use Google Web Fonts to ensure the website’s consistent appearance and thus its functionality on all end devices. The legal basis for the processing of that data is Art. 6 Par. 1(f) of the GDPR.
Google Maps
We use a map from Google Maps, a service of Google Ireland Limited, https://www.google.de/contact/impressum.html (“Google”), to visually display where our company is located. When your end device retrieves the map used on our website, the public IP address of the end device you are using is transmitted to Google. The IP address is a unique numeric address through which your end device sends data to or retrieves data from the internet. Google Maps is subject to Google’s general privacy policy, which is available at https://www.google.com/policies/privacy/ .
It is our legitimate interest to use Google Maps to help visitors to our website find where our company is located, so that we can be reached more easily. The legal basis for the processing of that data is Art. 6 Par. 1(f) of the GDPR.
Use of Cookies
We use cookies to operate our website, to comprehend how visitors use our website.
A cookie is a small text file that is stored on your end device when your browser calls-up our website. If you call up our website later, the cookies can be read-out again. Cookies are stored for variable lengths of time. On your browser, you have the opportunity at any time to set which cookies it will accept. This, however, can result in our website no longer functioning correctly. Furthermore, you can delete cookies on your own at any time.
We use analysis cookies that serve to analyze your user behavior. For details please read the information on “Google Analytics.”
Most browsers that serve our users permit setting which cookies are stored and make it possible to again delete (certain) cookies. If you limit the storage of cookies on certain websites or permit no cookies from third party websites, under certain circumstances this can lead to our website no longer being usable in full scope. You can find information here on how you can adapt the cookies settings on the common browsers:
- Google Chrome (google.com/chrome/answer/95647?hl=de)
- Internet Explorer (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)
Google Analytics
We use Google Analytics, a service provided by Google Ireland Limited, https://www.google.de/contact/impressum.html , for the processing of data. As the data processor, Google uses cookies for this purpose. A cookie is a small text file that is stored on your end device by your browser. Google uses cookies to obtain information about which websites you have visited, technical information about the end device you are using (e.g. browser type/version, operating system used, operating system and browser) and, in anonymized form, the public IP address of the end device you are using. Your IP address is only used in anonymized form for Google Analytics. For more details, we refer you to Google’s privacy policy, which is available at https://support.google.com/analytics/answer/6004245?hl=en . Further information about its IP masking can be found at https://support.google.com/analytics/answer/2905384/ . Google Analytics enables us, in a non-personalized manner, to compile usage statistics for our website and demographic data about visitors and their behavior. Furthermore, statistics are compiled that help us better understand how our website is found in order to improve our search engine optimization and advertising efforts. With this processing, we pursue the legitimate interest of being able to improve our website as well as our advertising measures. The legal basis for the processing of that data is Art. 6 Par. 1(f) of the GDPR. You can find information on how to opt-out of the use of Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=en .
If you click here Disable Google Analytics, a cookie will be stored in your browser enabling you to prevent the application of Google Analytics during your use of nest-one.com. The opt out only applies to the browser you are currently using. If you delete the cookie, you must opt out again.
Google is based in the European Union. In the event that data for the purposes of Google Analytics is transferred to Google companies in the United States, these companies are members of the Privacy Shield framework. The anonymized data will be deleted after 26 months.
Right to information
Pursuant to Art. 15 of the GDPR, you have the right to request confirmation from us about whether personal data relating to you is being processed by us. If this is the case, you have a right of access to this personal data and to further information cited in Art. 15 of the GDPR.
Right to rectification
According to Art. 16 of the GDPR, you have the right to demand from us immediately the rectification of inaccurate personal data concerning you. Taking into consideration the purposes of the processing of the data, you shall also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.
Right to erasure
You have the right to demand that we erase personal data concerning you immediately. We are obliged to delete personal data without undue delay if the corresponding requirements of Art. 17 of the GDPR are met. For further details, please refer to Art. 17 of the GDPR.
Right to restriction of processing
In accordance with Art. 18 of the GDPR, you have the right under certain circumstances to demand that we restrict the processing of your personal data.
Right to data portability
According to Art. 20 of GDPR, you have the right to receive the personal data pertaining to you that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from the controller, provided that the processing is based on consent pursuant to Article 6 Para. 1 (a) of the GDPR or Article 9 Para. 2 (a) of the GDPR or on a contract pursuant to Article 6 Para. 1 (b) of the GDPR and the processing is carried out by automated means.
Right to object
Pursuant to Art. 21 of the GDPR, you have the right to object to the processing of personal data concerning you on the basis of Article 6 Para. 1 (e) or (f) of the GDRP; this also applies to profiling based on those provisions.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you wish to exercise any right you are entitled to, please contact us at the contact information provided above or use any of the other means we offer to send us this notice. If you have any questions, please do not hesitate to contact us.
Pursuant to Art. 77 of the GDRP, you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy. This right exists in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider the processing of your personal data to infringe this GDRP regulation.
The existence of a right of appeal at the regulatory authorities
Pursuant to Art. 77 of the GDRP, you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy. This right exists in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider the processing of your personal data to infringe this GDRP regulation.
