PRIVACY POLICY

General note and mandatory information

Designation of the responsible body

The controller responsible for data processing on this website is:

OVAL Germany GmbH
Tim Cremer
Fürstenwall 172
40217 Düsseldorf

The controller decides alone or jointly with others on the purposes and means of processing personal data (e.. names, contact details, etc.).

If you have any questions about data protection, please contact our external data protection officer as follows:

Nextwork GmbH, Marco Peters, datenschutz@nextwork.de

Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Right to information, correction, blocking, deletion

You have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the framework of the applicable legal provisions. You can contact us at any time using the contact options listed in the legal notice if you have any further questions on the subject of personal data.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in server log files. These are

  • Visited page on our domain
  • Date and time of the server request
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact form

Data transmitted via the contact form, including your contact details, will be stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent.

The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. An informal notification by e-mail is sufficient for revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory statutory provisions - in particular retention periods - remain unaffected.

Newsletter data

We require an e-mail address from you in order to send you our newsletter. Verification of the e-mail address provided is necessary and you must consent to receiving the newsletter. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.

The data provided when registering for the newsletter will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. To withdraw your consent, simply send an informal message to or unsubscribe via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your end device. Cookies help us to make our website more user-friendly, effective and secure.

Some cookies are "session cookies". Such cookies are deleted automatically at the end of your browser session. Other cookies, on the other hand, remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Deactivating cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you , takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this privacy policy.

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.

Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google truncates your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.

Browser plugin

The setting of cookies by your web browser can be prevented. However, this may restrict some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

Details on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .

Order processing

We have concluded an order processing contract with Google in order to fully comply with the statutory data protection requirements.

Demographic characteristics in Google Analytics

Our website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection".

Data protection for applications 

General information

This privacy policy, which relates exclusively to the data collected as part of the online application process, is intended to inform you about how we handle your personal data collected as part of the online application process.

The controller responsible for the processing

The controller within the meaning of data protection law is

OVAL Germany GmbH
Fürstenwall 172, 40217 Düsseldorf
Phone: +49 2115502930

Commercial register entry number: HRB 48422
Register court:  Local Court Düsseldorf

Data protection officer: Nextwork GmbH, Marco Peters, datenschutz@nextwork.de

Personal data collected as part of the application process 

Personal data is any information relating to the personal or material circumstances of an identified or identifiable natural person. This includes information such as your name, your address, your telephone number and your date of birth, but also data about your specific professional career, etc., which can be used to identify a specific person with reasonable effort. However, information that cannot be directly linked to your real identity is not personal data. 

Basis and purposes of the processing of personal data collected from the application documents and during the application process 

If you apply to us electronically, i.e. by e-mail or via our online form, we collect and process your personal data for the purpose of carrying out the application process and preparing the contract. 

By sending an application

With your application via our recruiting website, you express your interest in working for us. In this context, you provide us with personal data that we will use and store exclusively for the purpose of your job search or application process. 

In particular, the following data is collected: 

  • Name (first and last name)
  • E-mail address
  • Phone number
  • LinkedIn profile (optional)
  • Channel through which you found us 

You also have the option of uploading informative documents such as a cover letter, your CV and letters of reference. These may contain additional personal data such as date of birth, address, etc. 

Only authorized employees of the HR department and/or employees involved in the application process have access to your data. 

As a rule, personal data is stored exclusively for the purpose of filling the position for which you have applied. 

Your data will be stored for a period of 180 days after completion of the application process. This is usually done to comply with legal requirements and/or to defend against claims arising from legal provisions. After this period has expired, we are obliged to delete or anonymize your data. In the case of anonymization, the data is only available to us in the form of so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of male and/or female applicants, number of applications in a certain period, etc.). 

Following the application process, you may receive an invitation to join our talent pool. This allows us to consider you for suitable vacancies in our applicant selection process in the future. If you have given your consent, we will store your application data in accordance with your consent and delete your data after 2 years. You can revoke this consent at any time with effect for the future.

If you are offered a position with us during the application process and accept it, we will store the personal data collected during the application process for at least the duration of your employment relationship. 

Disclosure of data to third parties 

The data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a personnel and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor in accordance with Article 28 of the GDPR. In this case, the processing is based on an order processing agreement between us as the controller and Personio. 

 Rights of the data subjects 

If we as the controller process personal data, you as the data subject have certain rights in accordance with Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing, in particular the right of access (Article 15 GDPR) and the rights to rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR) and data portability (Article 20 GDPR) as well as the right to object (Article 21 GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent in accordance with Article 7 III of the GDPR. 

To assert your rights as a data subject with regard to the data processed as part of this online application process, please contact our data protection officer (see point 2).

Final provisions 

We reserve the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to take account of changes in the application process or other processes. In this case, the new privacy policy will apply to any subsequent visit to this recruiting website or any subsequent application. 

In addition to this privacy policy, you can view our general privacy policy Privacy Policy.