Data privacy policy
The responsible party in terms of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
ONLINE Systemlogistik GmbH & Co. KG
Technoloiepark 8
33100 Paderborn
Germany
Tel.: 05251-779960
E-mail: info@oslnet.de
Website: www.oslnet.de
Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer:
- Information about your data stored by us and its processing (Article (Art.) 15 DSGVO),
- Correction of incorrect personal data (Art. 16 DSGVO),
- deletion of your data stored by us (Art. 17 DSGVO),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
- objection to the processing of your data by us (Art. 21 DSGVO) and
- Data portability, insofar as you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us consent, you can revoke this at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the data protection officer.
A list of the supervisory authorities (for the non-public sector) including an address can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
Collection of general information when visiting our website
Nature and purpose of processing:
When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and the like.
In particular, they are processed for the following purposes:
- Ensuring a smooth connection setup of the website,
- ensuring the smooth use of our website,
- evaluating system security and stability, and
- to optimise our website.
We do not use your data to draw conclusions about you personally. Information of this kind is statistically evaluated anonymously by us, if necessary, in order to optimise our website and the technology behind it.
Legal basis and legitimate interest:
The processing is carried out in accordance with Art. 6 (1) lit. f DSGVO based on our legitimate interest in improving the stability and functionality of our website.
Recipients:
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.
Third country transfer:
There is no third country transfer.
Storage period:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.
In the case of the storage of data in log files, this will happen after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymised so that an assignment of the calling client is no longer possible.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.
Cookies
Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.
You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Storage period and cookies used:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
Google Tag Manager – storage period: 14 months
Google Analytics – storage period: 14 months
Google Maps
Borlabs Cookies (Cookie Consent) – storage period: 1 year
Technically necessary cookies
Type and purpose of processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is also recognised after a page change.
Legal basis and legitimate interest:
The processing is carried out in accordance with Art. 6 (1) DSGVO on the basis of our legitimate interest in a user-friendly design of our website.
Recipients:
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.
Provision mandatory or required:
The provision of the aforementioned personal data is not required by law or contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted.
Objection
Please read the information about your right of objection according to Art. 21 DSGVO below.
Contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.
Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 (1) DSGVO).
By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.
If you contact us, the data entered into the contact form will be processed for the purpose of carrying out pre-contractual measures (if interested as a potential partner according to Art. 6 para. 1 lit. b GDPR, otherwise according to Art. 6 para. 1 lit. f GDPR).
Recipients:
Recipients of the data are, if applicable, order processors.
Third country transfer:
There is no third country transfer.
Storage period:
Data will be deleted no later than 6 months after processing the request.
If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
Provision mandatory or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
hCaptcha
To protect our forms against automated entries (spam, bots), we use the hCaptcha service. The provider is Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA.
Type and purpose of processing:
hCaptcha checks whether an entry in our forms is made by a human or by an automated program. For this purpose, a script provided by the provider is loaded when a form is called up and data is transmitted to the provider’s servers. The data processed includes in particular the IP address, information about your browser and device, language settings and interaction data recorded while you complete the form (e.g. mouse and keyboard movements). The provider may also store information on your device or access information already stored there. The check runs in the background; you will only be presented with an explicit task if the automated assessment does not produce a clear result.
Legal basis and legitimate interest:
Art. 6 (1) (f) GDPR. Our legitimate interest lies in protecting our website and our forms against abusive automated use and spam, and in keeping our communication channels available. Information is stored on or accessed from your device on the basis of Section 25 (2) no. 2 TDDDG, as this is strictly necessary in order to provide the service you have expressly requested – the submission of the form.
Recipients:
Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA
Third country transfer:
Data is transferred to the USA. The provider is certified under the EU-U.S. Data Privacy Framework, so the transfer takes place on the basis of the European Commission’s adequacy decision.
Storage period:
The provider deletes the data as soon as it is no longer required for the purpose of the check. For further details, please refer to the provider’s privacy policy: https://www.hcaptcha.com/privacy
Provision mandatory or required:
Provision is neither required by law nor by contract. However, without the check by hCaptcha it is technically not possible to submit our forms; alternatively, you can contact us by e-mail or by telephone.
Objection:
You may object to the processing pursuant to Art. 21 GDPR. In this case, please use the alternative contact channels.
Use of Google Analytics
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
Withdrawal of consent:
You can stop tracking by Google Analytics on our website by clicking this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
You may also refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.
In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: Browser Add On to deactivate Google Analytics.
Use of Google Maps
On this website, we use the services of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
You can find more information about data processing by Google in the Google data protection information: https://policies.google.com/privacy. There you can also change your personal data protection settings in the data protection center.
Detailed instructions on how to manage your own data in connection with Google products can be found here: https://www.dataliberation.org.
When you visit the website, Google receives information that you have accessed the relevant sub-page of our website. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.
If you do not want your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, and you must contact Google to exercise this right.
Withdrawal of consent:
No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website at all or only to a limited extent.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.
Applications
What data do we process in relation to the application process?
In the application process, we only process the personal data that you send us with your application. This typically includes the following data:
Surname, first name and date of birth; contact details (telephone number, email address); application data such as CV, cover letter and certificates; if applicable, information on health status or severe disability; if applicable, an application photo; bank details in case of reimbursement of travel expenses; if applicable, further information that you provide during the job interview.
For what purposes and on what legal basis is the data processed?
We process the data you have provided for the purpose of processing your application for the advertised position in accordance with Section 26 of the German Federal Data Protection Act (BDSG).
In some circumstances, it may be necessary for us to process your data for the defence or enforcement of legal claims. The legal basis in this case is Art. 6 para. 1 lit. f GDPR.
If your application documents contain special categories of personal data pursuant to Art. 9 para. 1 GDPR, these will be processed for the exercise of rights or fulfilment of obligations under employment law, social security law and social protection law in accordance with Art. 6 para. 1 sent. 1 lit. c GDPR in conjunction with Art. 9 para. 2 lit. b GDPR and Section 26 para. 3 BDSG.
Deletion of your data
Your data will be deleted 6 months after the end of the application process for the position you applied for. Upon hiring, this data will be transferred to the personnel file.
Recipients of your data
Your application data will only be forwarded internally to those people within the company who need it to screen applicants.
Your data may be passed on to processors in accordance with Art. 28 GDPR.
No data will be transferred to a third country.
Automated decision-making
Automated decision-making pursuant to Art. 22 para. 1 and 4 GDPR, including profiling, does not take place.
Our social media presence
This privacy policy applies to the following social media platforms: LinkedIn
Data processing by social networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Social networks like Facebook, X, etc. can usually analyse your user behaviour comprehensively when you visit their websites or websites with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media pages triggers numerous data processing operations relevant to data protection.
Specifically, if you are logged into your social media account and visit our social media pages, the operator of the social media portal can associate this visit with your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, data collection is carried out, for example, via cookies that are stored on your device or by recording your IP address.
Using the data collected in this way, the operators of social media portals can create user profiles in which your preferences and interests are stored. This way, you can be shown interest-based advertising both inside and outside the respective social media pages. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are or have been logged in.
Please also note that we cannot track all processing activities on the social media platforms. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the broadest possible reach on the Internet. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. A GDPR).
Responsible party and assertion of rights
When you visit one of our social media pages (e.g. LinkedIn), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. You can generally assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. LinkedIn).
Please note that despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options largely depend on the corporate policy of the respective provider.
Storage duration
The data we collect directly via our social media pages will be deleted from our systems as soon as you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
We have no influence over the storage period of your data, which is stored by the operators of the social networks for their own purposes. For further details, please contact the operators of the social networks directly or consult their privacy policies – see below.
Your rights
You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to object, the right to data portability and the right to lodge a complaint with the competent supervisory authority. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, restriction of the processing of your personal data.
Social networks in detail
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as Meta). According to Meta, the collected data will also be transferred to the USA and other third countries. We have entered into a joint processing agreement (Controller Addendum) with Meta.
This agreement sets out which data processing activities we and Meta are respectively responsible for when you visit our Facebook Page. You can view this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfers to the USA are based on the EU Commission’s standard contractual clauses.
Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and
https://de-de.facebook.com/help/566994660333381.
For details, please refer to Facebook’s privacy policy:
https://www.facebook.com/about/privacy/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider via the following link:
https://www.dataprivacyframework.gov/participant/4452
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you wish to disable LinkedIn advertising Cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here:
https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal data, please refer to LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to complying with these data protection standards.
Further information can be obtained from the provider via the following link:
https://www.dataprivacyframework.gov/participant/5448
Information about your right of objection according to Art. 21 DSGVO
Individual right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) DSGVO (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 (4) DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Recipients of an objection
See data protection officer
Changes to our data privacy policy
We reserve the right to adapt this data privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the data privacy policy, e.g. when introducing new services. The new data protection statement will then apply to your next visit.
Questions to the data protection officer
If you have any questions about data protection or privacy, please write us an e-mail or contact the person responsible for data protection in our organisation directly:
E-mail: datenschutz’at’vvwl.de
This privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).
This privacy policy for social media profiles was created with the help of eRecht24.