4.3.2. Purposes and legal basis of personal data processing
The processing of necessary cookies on your device is based on our legitimate interest within the meaning of point (f) of Article 6(1) GDPR to save the settings you have made for current and future use of our website.
The processing of all other cookies is based on your consent under point (a) of Article 6(1) GDPR in conjunction with Article 7 GDPR.
4.3.3. Duration of processing, ability to object and to disable cookies
Cookies are stored on your computer and transmitted by your computer to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website in full.
4.4. E-mail newsletter
4.4.1. Extent of personal data
Our website allows you to receive free e-mail newsletters on a regular basis to inform you about our latest interesting offers and news. When you sign up for the e-mail newsletter, the following data is sent to us.
- E-mail address (required)
- Personal data such as title, first name, last name (optional)
- IP address of the computer you are using
- Date and time of sign-up and confirmation
- Opening and click rate through pixel technology within the e-mail
We use double opt-in for the sign-up procedure. In other words, we will only send you e-mail newsletters if you confirm you wish to sign up after you have provided your e-mail address, using the e-mail we send you and the link contained therein.
Sign-up and confirmation are logged. This is to ensure that only you yourself can sign up for the newsletter service as the user of the specified e-mail address. Your confirmation must be made promptly, otherwise your sign-up and e-mail address will not be transmitted to TA Triumph-Adler. Until you have provided confirmation, our newsletter service will not accept any further sign-ups using this e-mail address.
4.4.2. Purposes and legal basis of processing
The user’s e-mail address is collected in order to deliver the e-mail newsletter to the correct target group. The legal basis of data processing after you have signed up for the newsletter is point (b) of Article 6(1) GDPR.
Sign-up and confirmation are logged in order to prove you have signed up and, if necessary, to be able to investigate any misuse of your personal data. We also have a legitimate interest in doing so in accordance with point (f) of Article 6(1) GDPR. No overriding legitimate interest on your part is apparent that would prevent us from processing this data. The logging is also in your interest, as it prevents unauthorised third parties signing up as you.
We also analyse, in accordance with point (f) of Article 6(1) GDPR, whether you have opened and read the e-mail newsletters and, if so, whether you clicked any links. This enables us to
- maintain our mailing lists and delete non-interested readers from our lists.
- determine which of our articles were particularly interesting in order to optimise our journalistic offering.
No overriding legitimate interest on your part is apparent that would prevent us from processing this data. By collecting statistical data, we ensure that we can offer you articles that are continuously optimised for your interests.
4.4.3. Recipients or categories of recipients, transmission of your data to a third country or international organisations and presence of an adequacy decision
For sending out our e-mail newsletter, we use the service provider CleverReach® GmbH & Co. KG (Mühlenstrasse 43, 26180 Rastede, Germany) as well as the service provider Salesforce for other processing. If you sign up for our newsletter, the data provided during sign-up is collected by TA Triumph-Adler, provided you confirm the sign-up process (received e-mail with confirmation link). The data is transferred to CleverReach and Salesforce, where it is processed in order to create the mailing list and to send out the newsletter.
Your data is transmitted to Salesforce (Salesforce Germany GmbH, Erika-Mann-Strasse 31, 80636 Munich, Germany, a company of Salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London, UK, EC2N 4AY as well salesforce.com Inc. The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA.) EU standard contract clauses have been concluded with the processor on the basis of point (c) of Article 46(2) GDPR.
4.4.4. Duration of storage
Your personal data is deleted at your request or when the service is discontinued. There is an unsubscribe link in every e-mail newsletter. The contents of non-confirmed sign-ups for the e-mail newsletter are not transferred to TA Triumph-Adler. Transfer takes place only when the link in the received e-mail is confirmed, otherwise the contents are deleted.
4.4.5. Right to erasure, objection and rectification
You can unsubscribe from our e-mail newsletter at any time by clicking ‘Unsubscribe’ at the bottom of the e-mail newsletter or by sending a short e-mail to abmeldung@triumph-adler.net. After unsubscribing, you will no longer receive e-mail newsletters. If your e-mail address has to be processed by us for other reasons, your e-mail address will be blocked for the sending of e-mail newsletters.
4.4.6. Consequences of not providing data
Our e-mail newsletter is a voluntary service. We need an e-mail address in order to send out our e-mail newsletter.
4.4.7. Other information
CleverReach also uses the Google Analytics analytics tool (see point 4.11). More information about CleverReach and privacy at CleverReach can be found (in German) here: https://www.cleverreach.com/de/datenschutz/
More information about privacy at Salesforce can be found (in German) here: https://www.salesforce.com/de/campaign/gdpr/
4.5. Contact forms
4.5.1. Nature and extent of personal data processing
Through our website, you can use our contact form for the following topics that you can select: ‘Consultation, Events, Feedback, Career, Press Inquiry, Products, Arrange call-back, Service, Support, TA Cockpit, Environment, Company’. The following data is transmitted to us when you use the contact form.
- First name, position, telephone number, customer number (optional)
- Title, last name, company, e-mail, postcode, customer (yes/no) (required)
- When ‘Arrange call-back’ is selected, the phone number is required and the e-mail is optional
- When ‘Career’ is selected, the ‘company’ field is not available
- Indication of consent to receive the newsletter
- Date and time the contact enquiry is sent
For data processing, your consent is obtained as part of the contact form and reference is made to our Privacy Policy. We use the opt-in procedure for the contact form. In other words, we transmit your contact details and message, provided you have acknowledged the Privacy Policy. Your data is logged and, if a quote or consultation is involved, recorded in our CRM for our sales team. All other possible selection fields such as Events, Feedback, Career, Press, Call-back, Service, Support and TA Cockpit are forwarded to the appropriate department to answer your enquiry.
4.5.2. Purposes and legal basis of personal data processing
User data is collected so as to answer the enquiry satisfactorily and, if desired, to provide it to our sales team for further consultation. The legal basis of processing the data after the user has used the contact form is point (a) of Article 6(1) GDPR (consent). The IP address, time of sign-up and the data you send to us by e-mail are processed on the basis of point (f) of Article 6(1) GDPR. If the purpose of the e-mail contact is to initiate or execute a contract, the legal basis of processing is point (b) of Article 6(1) GDPR.
4.5.3. Recipients or categories of recipients, transmission of your data to a third country or international organisations and presence of an adequacy decision
Your data is transmitted to authorised employees within our company. In addition, processors, such as IT service providers are used, who are responsible for operation, support and maintenance. There is no transmission of your data to a third country or international organisations.
4.5.4. Duration of storage
Data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form input screen and data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been resolved. The additional personal data collected during the sending process is deleted no later than after a period of one year.
4.5.5. Right to erasure, objection and rectification
You are able to withdraw your consent to the processing of your personal data at any time. If you contact us by e-mail, you may object to your personal data being stored at any time. In such a case, the conversation cannot continue. All personal data stored in the course of contact will be deleted in this case.
4.5.6. Consequences of not providing data
Our contact form is a voluntary service that we offer to you on our website. To transmit your contact enquiry, the required information listed above (under 4.5.1) as well as acknowledgement of our Data Privacy are necessary.
4.6. White papers, executive briefs and infographics
4.6.1. Nature and extent of personal data processing
Our website allows you to be sent white papers, executive briefs and infographics. If you request these, the following data is sent to us:
- Customer (yes/no), title, e-mail address, (required)
- Title, first name, last name, company, position (optional)
- Date, time the contact enquiry is sent
- Information about the sending of other e-mail newsletters or product information
We use double opt-in for the sign-up procedure. In other words, we will only send you the requested content if you confirm you wish to sign up after you have provided your e-mail address, using the e-mail we send you and the link contained therein.
Your request and confirmation are logged. This is to ensure that only you yourself can sign up for the download as the user of the specified e-mail address. Your confirmation must be made promptly, otherwise your sign-up and e-mail address in the database of the service provider will not be transmitted to us and will be deleted. Until you confirm, we will not send anything to this e-mail address.
If you have given your consent in the download form to receive the newsletter or future white papers, you will also receive confirmation links for these services in the e-mail we send you.
4.6.2. Purposes and legal basis of processing
The legal basis of data processing is point (a) of Article 6(1) GDPR (consent). The logging of your request, the processing of the IP address, the respective information material and the time are used to facilitate and prove your sign-up and, if necessary, to investigate any misuse of your personal data. We also have a legitimate interest in doing so in accordance with point (f) of Article 6(1) GDPR.
4.6.3. Recipients or categories of recipients, transmission of your data to a third country or international organisations and presence of an adequacy decision
For sending out the information materials, we use the service provider CleverReach® GmbH & Co. KG (Mühlenstrasse 43, 26180 Rastede, Germany) as well as the service provider Salesforce for other processing. If you sign up for our information material, the data provided is collected by TA Triumph-Adler, provided you confirm the sign-up process (received e-mail with confirmation link). The data is transferred to CleverReach and Salesforce, where it is processed in order to create the mailing list and to send out the information.
Your data is transmitted to Salesforce (Salesforce Germany GmbH, Erika-Mann-Strasse 31, 80636 Munich, Germany, a company of Salesforce.com EMEA Limited, village 9, floor 26 Salesforce Tower, 110 Bishopsgate, London, UK, EC2N 4AY as well salesforce.com Inc. The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA.) EU standard contract clauses have been concluded with the processor on the basis of point (c) of Article 46(2) GDPR.
4.6.4. Duration of storage
Your personal data is deleted if you withdraw your consent or when the service is discontinued.
4.6.5. Right to erasure, objection and rectification
If you have given your consent in the download form to receive white papers on a regular basis, you can unsubscribe from the service at any time by clicking ‘Unsubscribe’ in the e-mail you receive or on the website, or by sending a short e-mail to abmeldung@triumph-adler.net. After unsubscribing, you will no longer receive white papers. If your e-mail address has to be processed by us for other reasons, your e-mail address will only be blocked for e-mail newsletters and/or download mailings.
4.6.6. Consequences of not providing data
The sending out of our information materials is a voluntary service. To transfer the content, the required information listed above and acknowledgement of the Privacy Policy are necessary.
4.6.7. Other
CleverReach also uses the Google Analytics analytics tool (see point 4.11). More information about CleverReach and privacy at CleverReach can be found (in German) using the following Link.
More information about Salesforce can be found (in German) using the following Link.
4.7. Events and webinars
4.7.1. Nature and extent of personal data processing
Our website allows you to sign up for our events or webinars. The following data is transmitted to us when you use the sign-up form.
- Title, first name, last name, e-mail, company, postcode, customer (yes/no) (required)
- Telephone number, position (optional)
- Indication of consent to receive the e-mail newsletter
- Date and time the sign-up is sent
We use the opt-in procedure for signing up. In other words, we transmit your contact details, provided you have acknowledged the Privacy Policy. Your data is logged. If your query is about a webinar, your sign-up details will be sent to our service provider ‘GoToWebinar’.
4.7.2. Purposes and legal basis of personal data processing
The legal basis of data processing during sign-up and participation in our events and webinars is point (b) of Article 6(1) GDPR. The respective conditions of participation apply.
The logging of your request, the processing of the IP address and the time are used to facilitate and prove that you have signed up and, if necessary, to investigate any misuse of your personal data. We also have a legitimate interest in doing so in accordance with point (f) of Article 6(1) GDPR.
4.7.3. Recipients or categories of recipients, transmission of your data to a third country or international organisations and presence of an adequacy decision
Your personal information is processed by authorised personnel within our company for planning and running events and webinars. Other processors are used for the running of events and webinars.
In order to run webinars, your personal data (title, first name, last name, company, postcode, e-mail, customer yes/no) is shared with our service provider GoToWebinar (LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Republic of Ireland – part of LogMeIn, Inc., 320 Summer Street, Boston, MA 02210, USA). The parent organisation LogMeIn Inc. is certified under the US-EU ‘Privacy Shield’ data protection agreement and is thus committed to comply with European data protection requirements. You can find the certificate for the service provider here. A data processing agreement (EU standard contract clauses) has been concluded with the processor on the basis of point (c) of Article 46(2) GDPR.
4.7.4. Duration of storage
We do not know whether or for how long LogMeIn stores the above data.
4.7.5. Right to erasure, objection and rectification
Your personal data is deleted if you request such deletion using the addresses specified in point 5 or when the service is discontinued.
4.7.6. Consequences of not providing data
Participation in our events is voluntary. Participation is not possible unless the data listed in 4.7.1 is provided.
4.7.7. Existence of automated decision-making or profiling
No automated decision-making or profiling takes place.
4.7.8. Other
More information about the service provider we use can be found here.
4.8. Job applications
4.8.1. Nature and extent of personal data processing
Our website allows you to submit online job applications. For online job applications, we use the service ‘Softgarden’. When using the form, the following data is sent to Softgarden and TA Triumph-Adler in encrypted form.
- Personal master data (such as title, first and last name, date of birth, address)
- Communication data (e-mail address and telephone number)
- Application data (covering letter, CV, attachments, certificates and other information provided by you)
- IP address, date and time the application is sent
We use the opt-in procedure when using the form. In other words, we transmit your contact details, provided you have acknowledged the Privacy Policy. Your details and confirmation are logged. You can also create a CV using the social media platforms Xing, LinkedIn or Softgarden. To do so, you have to log in to your user account with the respective provider.
4.8.2. Purposes and legal basis of personal data processing
We collect and process your personal data in order to initiate and potentially establish a contractual relationship. When initiating a working relationship, in particular an employment relationship, the legal basis of processing is Article 88 GDPR in conjunction with Section 26 Federal Data Protection Act (BDSG).
There may be a possibility that your personal data will be used to establish, exercise and defend legal claims, if you or we have or assert legal claims. In such a case, the legal basis would be point (f) of Article 6(1) GDPR. In accordance with said provision, the processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests of the controller or third party are overridden by your interests or rights in excluding such processing.
The legitimate interests of the controller or a third party then lie in the establishment, exercise or defence of legal claims. If legal bases are mentioned in this information, the versions thereof as amended apply to the processing of personal data.
4.8.3. Recipients or categories of recipients, transmission of your data to a third country or international organisations and presence of an adequacy decision
Your application data is processed within the company, to the extent that this is necessary in order to establish the employment relationship. Furthermore, processors within the meaning of Article 28 GDPR are used, who are responsible for the operation and maintenance of our network, the devices and applications used. For online applications, we use the processor Softgarden (Softgarden e-recruiting GmbH, Tauentzienstrasse 14, 10789 Berlin, Germany). No transmission to third countries or international organisations takes place.
4.8.4. Duration of storage, right to erasure, objection and rectification
Data is stored until the application process is completed. Should we opt for another candidate, your data will be deleted after you have been rejected. In individual cases, data may be stored beyond the decision selecting another candidate for the position. This would be the case, for example, if there are indications that you might file claims against us. Data is then stored for as long as the processing of the data is necessary for the establishment, exercise or defence of legal claims. In this case, the criteria governing the storage period may include the time limits laid down in legislation such as Section 15(4) first sentence General Equal Treatment Act, Section 61b Labour Court Act, statutory limitation periods or statutory storage obligations.
In addition, data may be stored if this is provided for or mandated by the European or national legislator in EU Regulations, legislation or other rules to which the controller is subject.
4.8.5. Consequences of not providing data
For the application process, you are not required to provide us with personal data. However, we will not be able to complete the application process if we do not have the personal data that is necessary to assess your professional background, qualifications, availability and to get in touch. The use of our online application service is voluntary. As an alternative, you can also send us your application documents in writing.
4.9. Map display and geolocation
Our website uses Google Maps to show you where our offices are located and to make it easier for you to find us.
4.9.1. Nature and extent of personal data processing
When accessing this website, personal data as referred to in point 4.2.1. is automatically transferred to the service provider.
4.9.2. Purposes and legal basis of processing
Your personal data is processed in order to display the TA locations (legitimate interest within the meaning of point (f) of Article 6(1) GDPR).
4.9.3. Recipients or categories of recipients, transmissions to a third country and presence of an adequacy decision
By accessing the corresponding webpage, Google (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Republic of Ireland) receives the above information and thus information about which of our websites you have visited. If you are logged in as a member of Google LLC, Google Maps associates this information with your personal user account. The European Commission decided in its Adequacy Decision (EU) 2016/1250 of 12 July 2016 (EU-US Privacy Shield) that there is an adequate level of data protection in the USA. The corresponding certificate can be found here.
4.9.4. Storage duration and, if applicable, criteria for determining the storage duration
We do not know whether or for how long Google stores the above data.
4.9.5. Right to erasure, objection and rectification
It is technically possible that Google could use the data obtained to identify at least some users. We have no control over the processing by Google of personal data and personality profiles of website users for other purposes.
You can easily disable the Google Maps service and thus prevent data transfer to Google. To do so, disable JavaScript in your browser. We would point out, however, that you may not be able to use the map display in this case.
For more information, see the Google Maps Terms of Service and the Google Privacy Policy
4.10. Google reCAPTCHA
Our website uses Google reCAPTCHA to ensure that inputs are made by a natural person.
4.10.1. Nature and extent of personal data processing
When accessing this website, personal data as referred to in point 4.2.1. is automatically transferred to the service provider.
4.10.2. Purposes and legal basis of processing
In order to ensure adequate data security when transmitting information, we use the Google reCAPTCHA service in some cases. This is mainly used to distinguish whether the input is made by a natural person or improperly by machine and automated processing. Your personal data is processed on the basis of our legitimate interest within the meaning of point (f) of Article 6(1) GDPR in ensuring the security of our website.
4.10.3. Recipients or categories of recipients, transmissions to a third country and presence of an adequacy decision
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Republic of Ireland is the controller in respect of the personal data processing for displaying the fonts. When the website is accessed, your personal information is transferred to a third country, namely to the parent organisation Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. The European Commission decided in its Adequacy Decision (EU) 2016/1250 of 12 July 2016 (EU-US Privacy Shield) that there is an adequate level of data protection in the USA. The corresponding certificate can be found here here.
4.10.4. Storage duration and, if applicable, criteria for determining the storage duration
We do not know whether or for how long Google stores the above data.
4.10.5. Other
It is technically possible that Google could use the data obtained to identify at least some users. We have no control over the processing by Google of personal data and personality profiles of website users for other purposes.
If you do not consent to data being transmitted to Google, then you should not visit subpages of our website where Google reCAPTCHA is integrated.
Google’s deviating data privacy regulations apply in this respect. More information can be found in the Google Privacy Policy.
