Customer Forum Login

Data protection

and at the same time informing the per­sons con­cer­ned in accordance with Arti­cle 13 and Arti­cle 14 of the EU Gene­ral Data Pro­tec­tion Regulation

General statements and data processing information

Details of the respon­si­ble organisation

Com­pa­ny:
DIE SOFTWARE Peter Fit­zon GmbH

Legal Repre­sen­ta­ti­ves:
Dr. Alex­an­der Cas­sar, Dr. Klaus J. Friese

Address:
Im Klos­ter­bau­hof 3, 85560 Ebers­berg, Germany

Con­ta­ct details data pro­tec­tion officer

  • E‑Mail: datenschutz@die-software.com
  • Mail: at the abo­ve given com­pa­ny address with the addi­ti­on “Data Pro­tec­tion Officer”

The­se state­ments also app­ly to DIE SOFTWARE BAaS Ban­king App­li­ca­ti­ons and Ser­vices GmbH.

Data con­cer­ned:
Per­so­nal data is only collec­ted if you pro­vi­de it to us of your own accord. No other per­so­nal data is collec­ted. Any pro­ces­sing of your per­so­nal data that goes bey­ond what is per­mit­ted by law will only be car­ri­ed out on the basis of your express consent.

Pur­po­se of Pro­ces­sing:
Con­tract processing

Cate­go­ries of Reci­pi­ents:
- Public aut­ho­ri­ties in case of pre­vai­ling legal pro­vi­si­ons.
- Exter­nal ser­vice pro­vi­ders or other con­trac­tors.
- Other exter­nal bodies, pro­vi­ded the data sub­ject has con­sen­ted or a trans­fer is per­mis­si­ble for supe­ri­or interest.

Trans­fer to Third Coun­tries:
Con­trac­tors out­side the Euro­pean Uni­on may also be used in the con­text of the ful­fill­ment of the contract.

Dura­ti­on of Data Sto­rage:
The dura­ti­on of data sto­rage depends on the sta­tu­to­ry reten­ti­on obli­ga­ti­ons and is usual­ly 10 years.

Specific information about the website

Data Usa­ge:

When you access our web pages, you trans­mit data (out of tech­ni­cal neces­si­ty) to our web ser­ver via your inter­net brow­ser. The fol­lowing data is recor­ded during an ongo­ing con­nec­tion for com­mu­ni­ca­ti­on bet­ween your inter­net brow­ser and our web server:

  • Date and time of the request
  • Name of the reques­ted file
  • Page from which the file was requested
  • Access sta­tus (file trans­fer­red, file not found, etc.)
  • Web brow­ser and ope­ra­ting system
  • com­ple­te IP address of the reques­ting computer
  • amount of data transferred.

For rea­sons of tech­ni­cal secu­ri­ty, in par­ti­cu­lar to defend against attemp­ted attacks on our web ser­ver, we store this data for a short peri­od of time. It is not pos­si­ble for us to draw con­clu­si­ons about indi­vi­du­al per­sons on the basis of this data. The data is later anony­mi­sed by shor­tening the IP address at domain level, so that it is no lon­ger pos­si­ble to estab­lish a link to the indi­vi­du­al user. The data is also pro­ces­sed in anony­mi­sed form for sta­tis­ti­cal pur­po­ses; it is not com­pa­red with other data or pas­sed on to third par­ties, not even in extracts.

Use of Goog­le Ana­ly­tics with the con­sent of web­site visitors:

This web­site uses Goog­le Ana­ly­tics, a web ana­ly­tics ser­vice pro­vi­ded by Goog­le Inc. (“Goog­le”). Goog­le Ana­ly­tics uses “coo­kies”, which are text files pla­ced on your com­pu­ter, to help the web­site ana­ly­se how users use the site. The infor­ma­ti­on gene­ra­ted by the coo­kie about your use of this web­site is usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored the­re. In the event that IP anony­mi­sa­ti­on is acti­va­ted on this web­site, howe­ver, your IP address will be trun­ca­ted befo­re­hand by Goog­le wit­hin mem­ber sta­tes of the Euro­pean Uni­on or in other con­trac­ting sta­tes to the Agree­ment on the Euro­pean Eco­no­mic Area. Only in excep­tio­nal cases will the full IP address be trans­mit­ted to a Goog­le ser­ver in the USA and shor­ten­ed the­re. On behalf of the ope­ra­tor of this web­site, Goog­le will use this infor­ma­ti­on for the pur­po­se of eva­lua­ting your use of the web­site, com­pi­ling reports on web­site acti­vi­ty and pro­vi­ding other ser­vices rela­ting to web­site acti­vi­ty and inter­net usa­ge to the web­site ope­ra­tor. The IP address trans­mit­ted by your brow­ser as part of Goog­le Ana­ly­tics will not be mer­ged with other Goog­le data. You may refu­se the use of coo­kies by selec­ting the appro­pria­te set­tings on your brow­ser, howe­ver plea­se note that if you do this you may not be able to use the full func­tio­n­a­li­ty of this web­site. You can also pre­vent the collec­tion of data gene­ra­ted by the coo­kie and rela­ted to your use of the web­site (inclu­ding your IP address) by Goog­le and the pro­ces­sing of this data by Goog­le by down­loading and instal­ling the brow­ser plugin avail­ab­le under the fol­lowing link:

http://tools.google.com/dlpage/gaoptout?hl=de

Regar­ding the dis­cus­sion about the use of ana­ly­sis tools with com­ple­te IP addres­ses, we would like to point out that this web­site only uses Goog­le Ana­ly­tics after pri­or con­sent has been gran­ted and with the exten­si­on “_anonymizeIp()” and the­re­fo­re IP addres­ses are only pro­ces­sed in abbre­via­ted form in order to exclu­de direct per­so­nal refe­rence. Espe­cial­ly for brow­sers on mobi­le devices, plea­se click this link to pre­vent anony­mi­sed collec­tion by Goog­le Ana­ly­tics on this web­site for your brow­ser in the future by means of a so-cal­led “opt-out cookie”.

Borlabs Coo­kie

This web­site uses Borlabs Coo­kie, which sets a tech­ni­cal­ly necessa­ry coo­kie (borlabs-coo­kie) to store your coo­kie cons­ents. Borlabs coo­kie does not pro­cess any per­so­nal data. The borlabs-coo­kie stores the con­sent you gave when you ent­e­red the web­site. If you wish to revo­ke the­se cons­ents, sim­ply dele­te the coo­kie in your brow­ser. When you re-ent­er/­re­l­oad the web­site, you will be asked again for your coo­kie consent.

To adjust your coo­kie set­tings for our web­site, plea­se click  here.

Details of other data processing procedures

Spe­ci­fic infor­ma­ti­on on the app­li­ca­ti­on procedure

Data con­cer­ned:

App­li­ca­ti­on details

Pur­po­se of processing:

Imple­men­ta­ti­on of app­li­ca­ti­on procedure

Cate­go­ries of recipients:

Public bodies in case of over­ri­ding legal provisions.

Exter­nal ser­vice pro­vi­ders or other contractors.

Other exter­nal bodies inso­far as the data sub­ject has given con­sent or a trans­fer is per­mis­si­ble for over­ri­ding interest.

Third coun­try transfers:

No pro­ces­sors out­side the Euro­pean Uni­on are used.

Dura­ti­on of data storage:

App­li­ca­ti­on data is usual­ly dele­ted wit­hin four mon­ths after noti­fi­ca­ti­on of the decisi­on, unless con­sent has been given for lon­ger data sto­rage in the con­text of inclu­si­on in the app­li­cant pool.

Pro­ces­sing of (per­so­nal) data by the per­son respon­si­ble for the online app­li­ca­ti­on procedure

Gene­ral

We pro­vi­de this data pro­tec­tion decla­ra­ti­on, which rela­tes exclu­si­ve­ly to the data collec­ted as part of the online app­li­ca­ti­on pro­cess, to inform you about how we hand­le your per­so­nal data collec­ted as part of the app­li­ca­ti­on pro­cess. In gene­ral, per­so­nal data is only collec­ted as part of the online app­li­ca­ti­on pro­cess if you pro­vi­de it to us of your own accord. No other per­so­nal data is collec­ted. Any pro­ces­sing of your per­so­nal data that goes bey­ond the scope of the legal per­mis­si­ons will only be car­ri­ed out on the basis of your express consent.

Respon­si­ble entity

The respon­si­ble enti­ty (for all com­pa­nies of the DSW group of com­pa­nies) wit­hin the mea­ning of the DS-GVO is:

DIE SOFTWARE Peter Fit­zon GmbH
Im Klos­ter­bau­hof 3
85560 Ebers­berg
Ger­ma­ny
Pho­ne: +49 (0) 8092 / 86 17 – 0

Com­mer­cial Regis­ter
Regis­tra­ti­on num­ber: HRB 101848
Regis­ter court: Munich Local Court

Con­ta­ct details of the data pro­tec­tion officer:

by e‑mail: at datenschutz@die-software.com
by post: at the com­pa­ny address given abo­ve with the addi­ti­on “Data Pro­tec­tion Officer”.

Per­so­nal data in the con­text of the app­li­ca­ti­on process

Per­so­nal data is infor­ma­ti­on about the per­so­nal or fac­tu­al cir­cum­s­tan­ces of an iden­ti­fied or iden­ti­fia­ble natu­ral per­son. This inclu­des infor­ma­ti­on such as your name, address, tele­pho­ne num­ber and date of birth, but also data about your spe­ci­fic care­er, etc., which can be assi­gned to a spe­ci­fic per­son with rea­son­ab­le effort. Infor­ma­ti­on that is not (un)indirectly asso­cia­ted with your real iden­ti­ty, on the other hand, is not per­so­nal data.

Per­so­nal data concerned

Only per­so­nal data that you pro­vi­de to us as part of the app­li­ca­ti­on pro­cess will be processed.

Legal basis of processing

We pro­cess your per­so­nal data in accordance with the regu­la­ti­ons of the Euro­pean Gene­ral Data Pro­tec­tion Regu­la­ti­on (DS-GVO) and the Federal Data Pro­tec­tion Act (BDSG) for the pur­po­se of deci­ding on the estab­lish­ment of an employ­ment rela­ti­ons­hip. The legal basis for this is Art. 88 DS-GVO in con­junc­tion with § 26 BDSG (new) and, if app­li­ca­ble, Art. 6 Par. 1 lit. b DS-GVO for the initia­ti­on or imple­men­ta­ti­on of con­trac­tu­al rela­ti­ons­hips. Fur­ther­mo­re, we may pro­cess per­so­nal data about you inso­far as this is necessa­ry to ful­fil legal obli­ga­ti­ons (Art. 6 Par. 1 lit. c DS-GVO) or to defend asser­ted legal claims against us ari­sing from the app­li­ca­ti­on pro­cess. The legal basis for this is Art. 6 Par. 1 lit. f DS-GVO. If you have given us express con­sent to pro­cess your per­so­nal data in accordance with Art. 6 Par. 1 lit. a) DS-GVO, Art. 88 Par. 1 DS-GVO in con­junc­tion with Sec­tion 26 Par. 2 BDSG, we will use your data to the extent and for the pur­po­se descri­bed in the decla­ra­ti­on of consent.

Pur­po­ses for pro­ces­sing per­so­nal data for app­li­ca­ti­ons and in the app­li­ca­ti­on process

If you app­ly to us elec­tro­ni­cal­ly, i.e. by e‑mail or via our web form, we will collect and pro­cess your per­so­nal data sole­ly for the pur­po­se of pro­ces­sing the app­li­ca­ti­on pro­ce­du­re and car­ry­ing out pre-con­trac­tu­al mea­su­res. By sub­mit­ting an app­li­ca­ti­on on our recrui­t­ing page, you express your inte­rest in taking up employ­ment with us. In this con­text, you pro­vi­de us with per­so­nal data which we use and store exclu­si­ve­ly for the pur­po­se of your job search/application. Sin­ce you also have the opti­on of uploading mea­ning­ful docu­ments such as a cover let­ter, your CV and refe­ren­ces, the­se may con­tain fur­ther per­so­nal data such as your date of birth, address, etc. Only aut­ho­ri­sed employees have access to your data. Only aut­ho­ri­sed employees from the per­son­nel depart­ment or employees invol­ved in the app­li­ca­ti­on pro­cess have access to your data. Per­so­nal data is stored exclu­si­ve­ly for the pur­po­se of fil­ling the vacant posi­ti­on for which you have app­lied. Your data will be stored for a peri­od of 90 days bey­ond the end of the app­li­ca­ti­on pro­cess. As a rule, this is done to ful­fil legal obli­ga­ti­ons or to defend against any claims ari­sing from legal regu­la­ti­ons. We are then obli­ged to dele­te or anony­mi­se your data. In this case, the data is only avail­ab­le to us as so-cal­led meta­da­ta without direct per­so­nal refe­rence for sta­tis­ti­cal eva­lua­tions (for examp­le, pro­por­ti­on of women or men in app­li­ca­ti­ons, num­ber of app­li­ca­ti­ons per peri­od, etc.).

If you recei­ve an offer of employ­ment with us as part of the app­li­ca­ti­on pro­cess and accept it, we store the per­so­nal data collec­ted as part of the app­li­ca­ti­on pro­cess for at least the dura­ti­on of the employ­ment relationship.

Dis­clo­sure of data to third parties

The data trans­mit­ted as part of your app­li­ca­ti­on will be trans­fer­red via TLS encryp­ti­on and stored in a data­ba­se. This data­ba­se is ope­ra­ted by Per­so­nio GmbH, which offers per­son­nel admi­nis­tra­ti­on and app­li­cant manage­ment soft­ware (https://www.personio.de/impressum/). Per­so­nio is our order pro­ces­sor in this con­text in accordance with Art. 28 DS-GVO. The basis for the pro­ces­sing here is a con­tract for com­mis­sio­ned pro­ces­sing bet­ween us as the respon­si­ble enti­ty and Personio.

Third coun­try transfers

None.

Your rights

If per­so­nal data is pro­ces­sed by us as the respon­si­ble enti­ty, you as the data sub­ject have, depen­ding on the legal basis and pur­po­se of the pro­ces­sing, cer­tain rights under Chap­ter III of the EU Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR), in par­ti­cu­lar the right to infor­ma­ti­on (Art.15 DS-GVO), right to rec­ti­fi­ca­ti­on (Art. 16 DS-GVO), right to era­su­re (Art. 17 DS-GVO), right to restric­tion of pro­ces­sing (Art. 18 DS-GVO), right to data por­ta­bi­li­ty (Art. 20 DS-GVO), right to object (Art. 21 DS-GVO). If the pro­ces­sing of per­so­nal data is based on your con­sent, you have the right to revo­ke this con­sent under data pro­tec­tion law in accordance with Art. 7 III DS-GVO. Plea­se con­ta­ct our data pro­tec­tion offi­cer to assert your rights with regard to the data pro­ces­sed in this online app­li­ca­ti­on pro­ce­du­re (see point 2.). In addi­ti­on, you have the right to com­p­lain to the com­pe­tent data pro­tec­tion super­vi­so­ry aut­ho­ri­ty pur­suant to Art. 77 DS-GVO if you belie­ve that the pro­ces­sing of per­so­nal data collec­ted in the cour­se of your visit to our web­site vio­la­tes the Gene­ral Data Pro­tec­tion Regu­la­ti­on. The Bava­ri­an Sta­te Office for Data Pro­tec­tion Super­vi­si­on (BayL­DA) is respon­si­ble for us.

Final regu­la­ti­ons

We reser­ve the right to amend this pri­va­cy poli­cy at any time to ensu­re that it always com­plies with cur­rent legal requi­re­ments or to reflect chan­ges to the app­li­ca­ti­on pro­cess or simi­lar. The new data pro­tec­tion state­ment will then app­ly to a revi­sit to this recruit­ment page or a rene­wed application.

Spe­ci­fic infor­ma­ti­on on the pro­ces­sing of cus­to­mer data/prospect data.

Data con­cer­ned:

Data pro­vi­ded for the per­for­mance of the con­tract; if app­li­ca­ble, data bey­ond this for pro­ces­sing based on your expli­cit consent.

Pur­po­se of processing:

Con­tract per­for­mance, inclu­ding quo­ta­ti­ons, orders, sales and invoi­cing, qua­li­ty assurance.

Cate­go­ries of recipients:

Public aut­ho­ri­ties in case of over­ri­ding legal provisions.

Exter­nal ser­vice pro­vi­ders or other con­trac­tors, inclu­ding for data pro­ces­sing and hos­ting, ship­ping, trans­port and logistics, ser­vice pro­vi­ders for prin­ting and ship­ping infor­ma­ti­on and call centres.

Other exter­nal bodies inso­far as the data sub­ject has given con­sent or a trans­fer is per­mis­si­ble for over­ri­ding interest.

Third coun­try transfers:

No pro­ces­sors out­side the Euro­pean Uni­on are used.

Dura­ti­on of data storage:

The dura­ti­on of data sto­rage depends on the legal reten­ti­on obli­ga­ti­ons and is usual­ly 10 years.

Spe­ci­fic infor­ma­ti­on on the pro­ces­sing of employee data

Data con­cer­ned:

Data pro­vi­ded for the per­for­mance of the con­tract; if app­li­ca­ble, any addi­tio­nal data for pro­ces­sing based on your expli­cit consent.

Pur­po­se of processing:

Con­tract per­for­mance wit­hin the scope of the employ­ment relationship

Cate­go­ries of recipients:

Public aut­ho­ri­ties in the event of over­ri­ding legal pro­vi­si­ons, e.g. tax office, social secu­ri­ty institutions.

Exter­nal ser­vice pro­vi­ders or other con­trac­tors, e.g. for data pro­ces­sing and hos­ting, pay­roll accoun­ting, tra­vel expen­se accoun­ting, insuran­ce services.

Other exter­nal bodies inso­far as the data sub­ject has given con­sent or a trans­fer is per­mis­si­ble for pre­do­mi­nant interest.

Third coun­try transfers:

No pro­ces­sors out­side the Euro­pean Uni­on are used.

Dura­ti­on of data storage:

The dura­ti­on of data sto­rage depends on the sta­tu­to­ry reten­ti­on obli­ga­ti­ons and is usual­ly 10 years.

Spe­ci­fic infor­ma­ti­on on the pro­ces­sing of sup­plier data

Data con­cer­ned:

Data pro­vi­ded for the per­for­mance of the con­tract; if app­li­ca­ble, any addi­tio­nal data for pro­ces­sing based on your expli­cit consent.

Pur­po­se of processing:

Con­tract per­for­mance, inclu­ding enqui­ries, purcha­sing, qua­li­ty assurance.

Cate­go­ries of recipients:

Public aut­ho­ri­ties in the case of over­ri­ding legal provisions.

Exter­nal ser­vice pro­vi­ders or other con­trac­tors, e.g. for data pro­ces­sing and hos­ting, accoun­ting, pay­ment processing.

Other exter­nal bodies inso­far as the data sub­ject has given con­sent or a trans­fer is per­mis­si­ble for over­ri­ding interest.

Third coun­try transfers:

No pro­ces­sors out­side the Euro­pean Uni­on are used.

Dura­ti­on of data storage:

The dura­ti­on of data sto­rage depends on the legal reten­ti­on obli­ga­ti­ons and is usual­ly 10 years.

Spe­ci­fic infor­ma­ti­on on the use of video conferencing/webinar software.

Data con­cer­ned:

Data pro­vi­ded for the use of the video con­fe­ren­cing soft­ware or webi­nar soft­ware (esp. first name, last name, e‑mail address; optio­nal: sound trans­mis­si­on; optio­nal: image trans­mis­si­on; optio­nal: ques­ti­ons when using chat func­tions); to the extent tech­ni­cal­ly necessa­ry, pro­ces­sing of data from your sys­tem to estab­lish the con­nec­tion with the pro­vi­der of the con­fe­ren­cing software.

Pur­po­se of processing:

Con­duc­ting video con­fe­ren­ces or webinars.

Cate­go­ries of recipients:

Public bodies whe­re the­re is over­ri­ding legis­la­ti­on. Exter­nal ser­vice pro­vi­ders or other con­trac­tors, inclu­ding for data pro­ces­sing and hos­ting. Other exter­nal bodies inso­far as the data sub­ject has given con­sent or a trans­fer is per­mis­si­ble for over­ri­ding interest.

Third coun­try transfers:

Pro­ces­sors out­side the Euro­pean Uni­on are used (here: United Sta­tes of Ame­ri­ca); stan­dard con­trac­tu­al clau­ses have been con­clu­ded with the ser­vice pro­vi­der accordingly.

Dura­ti­on of data storage:

A record­ing of video con­fe­ren­ces only takes place with the pre­vious­ly docu­men­ted con­sent of the par­ti­ci­pants. The tech­ni­cal data is dele­ted if it is no lon­ger requi­red. The dura­ti­on of data sto­rage other­wi­se depends on the sta­tu­to­ry reten­ti­on obli­ga­ti­ons and is usual­ly 10 years.

More infor­ma­ti­on and contacts

In addi­ti­on, you can assert your rights to infor­ma­ti­on, cor­rec­tion or dele­ti­on or to restric­tion of pro­ces­sing or the exer­cise of your right to object to pro­ces­sing as well as the right to data por­ta­bi­li­ty at any time. Here you will find the pos­si­bi­li­ty to con­ta­ct us by e‑mail or let­ter. You also have the right to con­ta­ct the data pro­tec­tion super­vi­so­ry aut­ho­ri­ty in the event of complaints.