Skip to main content

PRIVACY POLICY

‍

Privacy notices pursuant to Art. 13 GDPR for customers

Privacy notices pursuant to Art. 13 GDPR for applicants

1. Name and Address of the Controller

Designplus GmbH
Rotenbergstr. 39
70190 Stuttgart
Germany
Phone: 0711-22552730
Email: info@designplus.org
Website: www.designplus.org

is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other applicable national data protection laws.

2. Name and Address of the Data Protection Officer

The controller's Data Protection Officer is:

AGOR AG
Ferdinand-Happ-Straße 53
60314 Frankfurt am Main
Germany
Phone: +49 (0) 69 – 9494 32 410
Email: info@agor-ag.com
Website: www.agor-ag.com

3. General Information on Data Processing

Scope of the processing of personal data: As a general rule, we only collect and use the personal data of users of our website to the extent necessary to provide a functioning website and our content and services.

As a general rule, we only collect and use our users' personal data with their consent. An exception to this principle applies in cases where the processing of data is permitted by statutory provisions or where obtaining prior consent is not possible for practical reasons.

4. Legal Basis for the Processing of Personal Data

  • Art. 6(1)(a) GDPR — where we obtain the consent of the data subject.
  • Art. 6(1)(b) GDPR — for processing necessary for the performance of a contract to which the data subject is a party. This also covers processing operations required to carry out pre-contractual measures.
  • Art. 6(1)(c) GDPR — for processing necessary to comply with a legal obligation.
  • Art. 6(1)(d) GDPR — where the processing of personal data is necessary to protect the vital interests of the data subject or of another natural person.
  • Art. 6(1)(f) GDPR — where processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, fundamental rights and freedoms of the data subject do not override that interest. In order to rely on a legitimate interest as the basis for processing personal data, we carry out an assessment for each relevant process, in coordination with our Data Protection Officer, in which the following three conditions must be met:
    1. The controller responsible for processing the personal data, or a third party, has a legitimate interest in the data processing.
    2. The processing is necessary to safeguard that legitimate interest.
    3. The interests, fundamental rights and freedoms of the data subject that require the protection of personal data do not outweigh the above.

5. Erasure of Data and Storage Period

Users' personal data will be erased or blocked as soon as the purpose of storage no longer applies. Data may be stored beyond this point where provided for by the European or national legislature under EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased once a storage period prescribed by the aforementioned rules expires, unless further storage is necessary for the conclusion or performance of a contract.

6. Use of Our Website, General Information

Description and scope of data processing

Whenever the content of our website is accessed, data that may allow identification is temporarily stored. The following data is collected in this process:

  • Date and time of access
  • IP address
  • Host name of the accessing device
  • Website from which our website was accessed
  • Websites accessed via our website
  • Page visited on our website
  • Notification of whether the request was successful
  • Volume of data transferred
  • Information on browser type and version used
  • Operating system

The temporary storage of this data is necessary for the duration of a website visit in order to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of our information technology systems. Our legitimate interest in the data processing also lies in these purposes.

The data described above is stored in the log files of our system. This data is not stored together with any other personal data of the user.

Web Hosting

Our website is hosted on the Webflow platform. The provider is Webflow, Inc., 398 11th St., Floor 2, San Francisco, CA 94103, USA. The hosting provider receives the above-mentioned data as a processor.

To host, secure and ensure the rapid delivery of our website, Webflow uses the infrastructure of the following sub-processors:

  • Amazon Web Services (AWS), Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA: torage of website data on cloud servers. Further information: https://aws.amazon.com/de/privacy/
  • Cloudflare, Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: Protection of the website against attacks (e.g. DDoS) and optimisation of loading times. Further information: https://www.cloudflare.com/privacypolicy/
  • Fastly, Fastly, Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA: Content Delivery Network for the rapid delivery of content. Further information: https://www.fastly.com/privacy

The purposes of the data processing are:

  1. Professional hosting of the website and safeguarding its operation
  2. Maintaining operational and IT security
  3. Anonymous evaluation of access behaviour to improve our offering and, where applicable, for the prosecution of criminal offences or the pursuit of claims

The lawfulness of the processing of personal data in connection with web hosting is based on Art. 6(1)(f) GDPR (safeguarding of legitimate interests), since the use of professional hosting with a provider is necessary to present our company on the internet in a secure and user-friendly manner and, where applicable, to be able to pursue any resulting attacks and claims.

Webflow also processes your data, among other places, in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the lawfulness and security of the data processing.

As a basis for the processing of data by recipients located in third countries (outside the European Union, Iceland, Liechtenstein and Norway, i.e. in particular in the USA) or for the transfer of data to such countries, Webflow uses what are known as Standard Contractual Clauses (Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission that are intended to ensure that your data continues to meet European data protection standards even when transferred to, and stored in, third countries (such as the USA). Through these clauses, Webflow undertakes to comply with the European level of data protection when processing your relevant data, even where the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the European Commission.

You can find the decision and the corresponding Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

Further information on the Standard Contractual Clauses and on the data processed through the use of Webflow can be found in Webflow's Privacy Policy at https://webflow.com/legal/privacy.

7. Purpose and Legal Basis for the Data Processing

The temporary storage of the IP address by our system is necessary to enable the website to be delivered to the user's device. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

The legal basis for the temporary storage of the data and of the log files is Art. 6(1)(f) GDPR.

The collection of your personal data for the purpose of providing our website, and the storage of the data in log files, is absolutely necessary for the operation of the website. Users therefore have no option to object.

8. Storage Period

Your data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. Where your data is collected to enable the website to be provided, the data will be erased once the respective session has ended.

Where your data is stored in log files, it will be erased after seven days at the latest. Storage beyond this period is possible; in that case, users' IP addresses are erased or anonymised, so that it is no longer possible to identify the client that accessed the site.

9. General Information on the Use of Cookies

Our website uses cookies. Cookies are text files that are stored in, or by, the internet browser on the user's computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

We use cookies to make our website more user-friendly. Some elements of our website require the browser to remain identifiable even after navigating to a different page.

TDDDG:

The legal basis for the storage of cookies, device identifiers and similar tracking technologies — i.e. for storing information on the end user's terminal equipment and accessing such information — is the European ePrivacy Directive in conjunction with the German Telecommunications-Digital-Services-Data-Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, "TDDDG").

Please note that the legal bases for the processing of the personal data collected in this context then follow from the GDPR (Art. 6(1) sentence 1 GDPR). You will find the legal basis applicable in each specific case further below, next to the respective cookie or processing activity.

The primary legal basis for storing information on the end user's terminal equipment — in particular for storing cookies — is your consent, Section 25(1) sentence 1 TDDDG. Consent is given when you visit our website — although, of course, it does not have to be given — and may be withdrawn at any time in the cookie settings.

Pursuant to Section 25(2) no. 2 TDDDG, consent is not required where storing information on the end user's terminal equipment, or accessing information already stored there, is strictly necessary in order for a telemedia service provider to provide a telemedia service expressly requested by the user. The cookie settings indicate which cookies are classified as strictly necessary (often also referred to as "technically necessary cookies") and therefore fall under the exemption in Section 25(2) TDDDG, and thus do not require consent.

GDPR:

When cookies are used, the following data is stored and transmitted:Current language, interaction with the newsletter banner, cache yes/no

The legal basis for the processing of personal data through the use of cookies is Art. 6(1)(f) GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.

We would like to point out that certain functions of our website can only be offered through the use of cookies. This applies to the following features: language settings, newsletter banner.

We do not use user data collected through technically necessary cookies to create user profiles.

Cookies are stored on the user's computer and transmitted from it to our site. As a user, you therefore have control over the use of cookies. You can restrict or disable the transmission of cookies by changing your internet browser's settings. Cookies that have already been stored can also be deleted there. Please note that you may no longer be able to use all functions of our website if you disable cookies.

The legal basis for the processing of personal data through the use of cookies for analysis and advertising purposes is, where the user's consent has been obtained for this purpose, Art. 6(1)(a) GDPR.

10. Your Rights / Rights of the Data Subject

a. Right of Access

You have the right to obtain confirmation from us, as controller, as to whether personal data concerning you is being processed, as well as further information in accordance with the statutory requirements under Art. 13 and 14 GDPR.

You can exercise your right of access at: info@designplus.org

b. Right to Rectification

If the personal data we process concerning you is inaccurate or incomplete, you have the right, vis-à-vis us, to have it rectified and/or completed. Rectification will be carried out without undue delay.

c. Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data in accordance with the statutory provisions (Art. 18 GDPR).

d. Right to Erasure

Where the grounds set out in Art. 17 GDPR apply, you may request that your personal data be erased without undue delay.

Please note that the right to erasure does not apply where processing is necessary for one of the exceptions set out in Art. 17(3).

e. Right to Notification

Where you have exercised your right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom your personal data has been disclosed of such rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort. You also have the right to be informed of these recipients.

f. Right to Data Portability

Under the GDPR, you also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.

g. Right to Withdraw Your Data Protection Consent

You have the right to withdraw your data protection consent at any time. Please note that the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal.

h. Right to Object

You further have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR.

i. Automated Individual Decision-Making, Including Profiling

Under the EU General Data Protection Regulation, you further have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you.

j. Right to Lodge a Complaint with a Supervisory Authority

If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

11. Data Transfers Outside the EU

The GDPR guarantees a uniformly high level of data protection within the European Union. When selecting our service providers, we therefore give preference, wherever possible, to European partners for the processing of your personal data. Only in exceptional cases will we have data processed outside the European Union in connection with the use of third-party services. We only permit the processing of your data in a third country where the specific requirements of Art. 44 et seq. GDPR are met. This means that your data may only be processed on the basis of special safeguards, such as an official finding by the European Commission of a level of data protection equivalent to that of the EU, or compliance with officially recognised specific contractual obligations — the so-called "Standard Contractual Clauses".

EU-US Trans-Atlantic Data Privacy Framework

Under the so-called "Data Privacy Framework" (DPF), the European Commission has, by way of the adequacy decision of 10 July 2023, also recognised the level of data protection as adequate for certain companies based in the USA. The list of certified companies, as well as further information on the DPF, is available on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/s/participant-search.

12. Individual Tools

a

a. Contact form and contacting us by email

We provide a contact form on our website. If you use it, the data you enter will be transmitted to us and stored: name, company name, email address, message. In addition, the date and time of transmission are stored.

Alternatively, you can contact us by email. In this case, we will store the personal data transmitted with the email.

Purpose and legal basis: We process the data solely for the purpose of handling your enquiry. The legal basis is Article 6(1)(b) of the GDPR, provided your enquiry relates to a contract or pre-contractual measures; otherwise, it is our legitimate interest in responding to enquiries (Article 6(1)(f) of the GDPR).

Recipients and transfers to third countries: Form submissions are processed via our hosting provider, Webflow, Inc., and stored on servers in the USA (infrastructure: Amazon Web Services). Webflow acts as a data processor on our behalf. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework (Adequacy Decision of the European Commission of 10 July 2023, Article 45 of the GDPR) and, in addition, on the basis of standard contractual clauses (Article 46(2)(c) of the GDPR). We also receive the enquiry by email. The data is not disclosed to any other third parties.

Retention period: Your data will be deleted as soon as your enquiry has been fully processed and provided there are no statutory retention obligations that prevent this.

b. Content Delivery Networks (CDN)

This website uses what are known as Content Delivery Networks to provide popular online libraries and web fonts. In this case, access is made directly to the operators' servers, so that data such as the accessing IP address, referrer, browser information, etc. is generated there.

The legal basis for this is our legitimate interest, pursuant to Art. 6(1)(f) GDPR, in presenting our website appropriately and optimising the user experience.

You can prevent the collection and processing of your data by CDNs by disabling the execution of script code in your browser or by installing a script blocker (one such tool can be found, for example, at www.noscript.net).

The CDNs used are listed below:

code.jquery.com for jQuery MigrateThis website uses jQuery Migrate for improved stability. In this connection, program libraries are called from jQuery servers, using Google's Content Delivery Network (CDN). If you have previously used jQuery Migrate on another website via the jQuery CDN, your browser will retrieve the copy stored in its cache. If not, a download is required, during which data is transmitted from your browser to the jQuery Foundation ("jQuery.org"). Your data is transferred to the USA. Further information is available at https://code.jquery.com/ and in the jQuery Foundation's privacy policy: https://openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf

c. Bunny.net

We also use the services of Bunny.net (BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia) to deliver media content and optimise loading speed. When videos or other content provided via bunny.net are accessed, technically necessary connection data is processed, in particular the accessing IP address, referrer, browser information, etc.

Bunny.net receives the above-mentioned data as a processor.

The legal basis is Art. 6(1)(f) GDPR. The processing takes place in order to deliver the requested content and to ensure secure, efficient operation of the website.

d. Personio

We use Personio to carry out our recruitment process. The provider is Personio SE & Co. KG, Seidlstraße 3, 80335 Munich. Personio provides human-resources-management and applicant-tracking software and is, in this context, our processor within the meaning of Art. 28 GDPR.

The data you submit as part of your application is stored in Personio's database. The basis for this processing is a data processing agreement between us, as controller, and Personio.

e. Social Media

Social media platform Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; privacy policy/opt-out: http://instagram.com/about/legal/privacy/

f. LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, IrelandPrivacy Policy: https://www.linkedin.com/legal/privacy-policyOpt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

g. Social Media Presence

We maintain pages within various social networks and platforms in order to communicate with, and inform about our services, the customers, prospects and users active there.

Please note that, in doing so, your personal data may be processed outside the European Union, which may involve certain risks for you (for example, when enforcing your rights under European/German law).

User data is generally processed for market-research and advertising purposes. For example, user profiles may be created based on usage behaviour and the resulting interests of users. These profiles may in turn be used, for example, to display advertisements — both within and outside the platforms — that are likely to correspond to the interests of the users. For these purposes, cookies are generally stored on users' devices, in which usage behaviour and interests are recorded. Data may also be stored in user profiles independently of the specific device used (in particular where users are members of, and logged in to, the relevant platform).

The processing of users' personal data is based on our legitimate interest in effectively informing and communicating with users pursuant to Art. 6(1)(f) GDPR. Where users are asked by the respective providers to give their consent to the data processing (i.e. by ticking a checkbox or confirming a button, for example), the legal basis for the processing is Art. 6(1)(a) GDPR.

Further information on the processing of your personal data, as well as your options to object, is available via the links to the respective providers listed above/below. Requests to exercise the right of access and other data subject rights may also be directed to the providers, as they have direct access to users' data and the relevant information. We are, of course, happy to answer any questions and assist you should you need help.

h. Use of SalesViewer® Technology

This website uses SalesViewer® technology from SalesViewer® GmbH, on the basis of the website operator's legitimate interests (Art. 6(1)(f) GDPR), to collect and store data for marketing, market-research and optimisation purposes.

For this purpose, JavaScript-based code is used to collect and use company-related data. The data collected using this technology is encrypted using a non-reversible one-way function (hashing). The data is immediately pseudonymised and is not used to personally identify visitors to this website.

Data stored as part of SalesViewer is erased once it is no longer required for its intended purpose and provided no statutory retention obligations preclude erasure.

You may object at any time, with effect for the future, to this data collection and storage by clicking the following link: https://www.salesviewer.com/de/opt-out/, to prevent future collection by SalesViewer® on this website. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you will need to click this link again.

‍