Data collection and processing on our website
We would like to inform you below about the collection and processing of personal data in the context of the use of our Internet pages.
Responsible
8R Partners GmbH (Herzogspitalstr. 11, 80331 Munich, Germany) is responsible for these internet pages. Further information about our company and the persons authorized to represent you can be found in our legal notice.
Which data do we use?
Legal basis for the processing
In order to be able to offer you our website and the associated services, we process personal data on the basis of the following legal basis:
– as a result of your consent (Art. 6 (1 a) GDPR)
– in order to comply with contractual obligations (Art. 6 (1 b) GDPR)
– within the scope of the balancing of interests (Art. 6 (1 f) GDPR)
– on the basis of statutory regulations (Art. 6 (1 c) GDPR)
We will refer to the respective terminology in connection with the respective processing, so that you can see the basis on which we process personal data.
If personal information is processed by you on the basis of your consent, you have the right to revoke your consent to us at any time with future effect.
If we process data on the basis a balancing of interests, you, as the person concerned, have the right to object to the processing of your personal data, taking into account the requirements of Art. 21 GDPR.
Access data
When you visit our website, personal data is processed in order to be able to display the contents of the website on your device.
In order to display the pages in your browser, the IP address of the device you are using must be processed. Furthermore, more information about the browser of your device will be processed.
In terms of data protection, we are also obliged to guarantee the confidentiality and integrity of personal data processed using our IT systems.
For this purpose and for this interest, the following data are processed on the basis of balancing of interests:
– an Internet protocol address (IP address) – only processed in real time, but not saved
– the operating system used by the accessing system
– the browser types and versions used
– name of the retrieved file
– the date and time of access
– transferred amount of data
– the website from which an accessing system reaches our website (so-called referrers).
The full IP address will not be saved. Only the first 6 digits (192.168.x.x) are saved. We can no longer create a personal reference from the remaining data.
The data is also used to detect and correct errors on the Internet pages.
Purposes of processing personal data
We process the aforementioned data for the operation of our website and for the fulfillment of contractual obligations towards our customers or the protection of our legitimate interests.
Voluntary information
As far as you provide voluntarily data (e.g. in forms) and these are not required for the performance of our contractual obligations, we process these data in the legitimate assumption that the processing and use of this data in your interest.
Recipients / Transfer of data
Data that you provide to us will generally not be disclosed to third parties. In particular, your data will not be disclosed to third parties for their advertising purposes.
This website has links to external websites as well as social medias. Only once you clicked on a social media button or link your browser establishes a direct connection to the server of the external websites. We have no Influence on the extent of the data collected in this way by the operators of the websites and social networks. Please note that websites linked to this website may install their own cookies on your device or collect personal data. We have no control over this.
Regarding social networks, please note that the operator may process the information that you have accessed our website. If you are logged into one of the social networks at the same time, the operator can assign the corresponding calls to your account on the respective social network. Even if you are not a member of one of the linked social networks, there is a possibility that they will find out your IP address via the social plugin and, eventually record it. For details on the purpose and scope of data processing, collection and use, and your rights and settings in this regard, please refer to the relevant data protection notices.
If you do not want external websites to collect data about you through our website, do not click on the buttons.
Data processing outside the European Union
If personal data is processed outside the European Union, you can see this from the previous comments.
Data Protection Officer
We named a Data Protection Officer.
You can reach her under:
8R Partners GmbH
Data Protection Officer
Herzogspitalstr. 11
80331 Munich
Germany
E-Mail: dataprivacy@8R.de
Erasure of data
In principle, we delete personal data when there is no requirement for further storage. A requirement may exist, in particular, if the data is still needed in order to be able to fulfill contractual obligations, to examine warranty claims and, if applicable, guarantee claims and to grant or defend them. In the case of legal storage obligations, the date will be deleted only after expiration of the respective retention obligation.
Your rights as a data subject
If your personal data is processed, you are a data subject according to GDPR and you have the following rights:
1. Right of access
You have the right to obtain from the responsible the confirmation as to whether or not personal data concerning you are being processed.
If such processing occurs, you can request from the responsible access to following information:
(1) the purposes of the processing;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
(4) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing;
(6) the existence of the right to lodge a complaint with a supervisory authority;
(7) where the personal data are not collected from the data subject, any available information as to their source;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organization. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer according to Art. 46 GDPR.
2. Right to rectification
You have the right to obtain from the responsible the rectification and/or completion of inaccurate/incomplete personal data concerning you. The responsible must proceed with the rectification without undue delay.
3. Right of restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
(1) The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
(2) The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead.
(3) The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
(4) The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of a Member State.
If the restriction of the processing under the abovementioned conditions is limited, you will be informed by the person in charge before the limitation is lifted.
4. Right to erasure (Right to be forgotten)
a) Duty to delete
You may require the responsible to delete your personal information without delay, and the responsible is required to delete that information immediately if one of the following is true:
(1) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(2) The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
(3) The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
(4) The personal data have been unlawfully processed.
(5) The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
b) Information to third parties
Where the responsible has made personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the responsible, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such responsible of any links to, or copy or replication of, those personal data, as far as processing is not required.
c) Exceptions
The right to erasure does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation required by the law of the Union or of the Member States to which the responsible is subject, or to carry out a task of public interest or in the exercise of public authority delegated to the responsible;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(4) for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
(5) to assert, exercise or defend legal claims.
5. Right to information
If you have the right of rectification, erasure or restriction of processing to the responsible, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have the right to be informed by the responsible who are those recipients.
6. Right to data portability
You have the right to receive personally identifiable information you provide to the responsible in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
(1) the processing is based on a consent acc. Art. 6 (1) a GDPR or Art. 9 (2). a GDPR or on a contract acc. Art. 6 (1) b GDPR and
(2) the processing is done by automated means.
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the responsible.
7. Right to object
You have the, on grounds relating to your particular situation, at any time, to object the processing of your personal data, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.
The responsible shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
If the responsible processes personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the 8R Partners GmbH to the processing for direct marketing purposes, the 8R Partners GmbH will no longer process the personal data for these purposes.
Regardless of Directive 2002/58/EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
8. Right to withdraw data protection consent
You have the right to withdraw your consent to processing of personal data at any time. The withdraw of consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
9. Right to appeal to a competent data protection supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates against the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
Changes of this privacy policy
We revise this Privacy Policy for changes to this website or other occasions that may require it. You will always find the current version on this website.
Privacy Policy Last update by 8R on 02.09.2024
Data processing in the context of our Xing presence
Imprint
Information pursuant to § 5 DDG:
8R Partners GmbH
Herzogspitalstr. 11
80331 Munich
Germany
Phone: +49 89 2153 2403
E-Mail: info@8r.de
Authorized Managing Director: Nicholas Minkner
Registered in the commercial register, register court: Munich
VAT Identification Number pursuant to § 27a of the German VAT Act: DE351368411
Privacy Policy
We, 8R Partners GmbH, Herzogspitalstr. 11, 80331 Munich, maintain an online presence on www.xing.de.
For this purpose, we use the services of the technical platform operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter: XING).
Further contact details of our company can be found in our imprint.
Our XING company profile is used to represent our company and to establish contact with potential applicants and customers. In this context, personal data is processed occasionally. Below, we inform you about the processing of your personal data on our company profile.
You can reach our Data Protection Officer at:
8R Partners GmbH
Herzogspitalstr. 11
80331 Munich
Germany
E-Mail: dataprivacy@8R.de
We hereby inform you that you use this XING page and its functionalities at your own responsibility. This applies in particular to the usage of interactive functions such as sharing.
Processing by 8R Partners GmbH
As the operator of the company profile on XING, we have access to statistical evaluations regarding visits to the company profile. This data is available in aggregated and anonymized form and does not allow us to draw conclusions about individual visitors to the company profile. We use these statistical evaluations to continuously improve the information provided for visitors and to tailor it to user interests. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.
If users are logged into their XING account while accessing the company page, information about the access can be linked to their respective user account. This information is also available to us as the operator of the company profile. The provision of such information can be prevented by logging out of the XING account before accessing the company page.
Visitors to the company profile also have the opportunity to use interactive features such as the Like button, sharing, and commenting on posts. This usually requires the visitor to be logged into XING. Through this use, personal data and information become visible to us and other visitors to the company profile, potentially allowing direct personal identification. We have no influence on these interactive functionalities and the visibility of user activities.
Additionally, visitors can contact us via the contact methods provided on the company profile. Information transmitted to us in this way is processed based on Art. 6(1)(b) GDPR (pre-contractual measures). We use this information solely for the purpose of responding to inquiries appropriately.
All data collected by us on XING is stored and deleted in accordance with XING’s data protection regulations. We do not store any data internally beyond this.
Processing by XING
Please note that when using and accessing our company profile, processing by XING also occurs. This data processing is carried out solely by NEW WORK SE, whose privacy policy can be viewed here: https://privacy.xing.com/de/datenschutzerklaerung.
We have no influence on the data collected and processing activities by XING, nor do we have knowledge of the full extent of data collection, purposes of processing, or storage durations. We also have no information on the deletion of collected data.
If personal data of users is processed, they have rights under the EU General Data Protection Regulation, including the right to access, rectification, objection, portability, and deletion of data. NEW WORK SE is required to respond to requests from affected individuals. Further information on users’ rights is available here: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen.
User inquiries regarding data processing when visiting a XING profile, which fall under the sole responsibility of NEW WORK SE, will be forwarded to NEW WORK SE. Users can contact NEW WORK SE’s Data Protection Officer directly via the following link: https://www.xing.com/support/contact/security/data_protection.
Data Processing in Connection with Our LinkedIn Presence
Imprint
Information pursuant to § 5 DDG:
8R Partners GmbH
Herzogspitalstr. 11
80331 Munich
Germany
Phone: +49 89 2153 2403
E-Mail: info@8r.de
Authorized Managing Director: Nicholas Minkner
Registered in the commercial register, register court: Munich
VAT Identification Number pursuant to § 27a of the German VAT Act: DE351368411
Privacy Policy
We, 8R Partners GmbH, Herzogspitalstr. 11, 80331 Munich, maintain an online presence on www.linkedin.de.
For this purpose, we use the services of the technical platform operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).
Further contact details of our company can be found in our imprint.
Our LinkedIn page is used to represent our company and to establish contact with potential applicants and customers. In this context, personal data is processed occasionally. Below, we inform you about the processing of your personal data on our LinkedIn page.
You can reach our Data Protection Officer at:
8R Partners GmbH
Herzogspitalstr. 11
80331 Munich
Germany
Email: dataprivacy@8R.de
We hereby inform you that you use this LinkedIn page and its functionalities at your own responsibility. This applies in particular to the usage of interactive functions such as sharing.
For the processing of personal data when visiting our LinkedIn page, LinkedIn is generally the sole controller. Further information on data processing by LinkedIn can be found at: https://de.linkedin.com/legal/privacy-policy.
If you visit our LinkedIn company page, follow this page, or interact with it, LinkedIn processes personal data to provide us with anonymized statistics and insights. This allows us to gain insights into the types of actions people take on our page (so-called Page Insights). For this purpose, LinkedIn primarily processes data that you have already provided to LinkedIn through your profile, such as information about your role, country, industry, seniority, company size, and employment status. Additionally, LinkedIn will process information about how you interact with our LinkedIn company page, such as whether you are a follower of our page.
Through Page Insights, LinkedIn does not provide us with any personal data about you. We only have access to aggregated Page Insights. It is also not possible for us to draw conclusions about individual members based on the Page Insights data. This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. The evaluation of the types of actions taken on our LinkedIn company page serves to improve our page based on these insights. The legal basis for this processing is Art. 6 (1) lit. f) GDPR.
We have entered into an agreement with LinkedIn regarding joint controllership, which defines the allocation of data protection responsibilities between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum.
According to this agreement:
LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn online via the following link: https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de or reach LinkedIn through the contact details provided in their privacy policy. The Data Protection Officer at LinkedIn Ireland can be contacted via this link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
You may also contact us using our provided contact details regarding the exercise of your rights concerning the processing of personal data in the context of Page Insights. In such cases, we will forward your request to LinkedIn.
LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing the processing for Page Insights. You always have the right to file a complaint with the Irish Data Protection Commission (www.dataprotection.ie) or any other supervisory authority.
Please note that, according to LinkedIn’s privacy policy, personal data may also be processed by LinkedIn in the USA or other third countries. LinkedIn states that it only transfers personal data to countries for which an adequacy decision by the European Commission exists under Art. 45 GDPR or based on appropriate safeguards under Art. 46 GDPR.