As a rule, our website can be used without providing personal data. Personal data of our visitors will only be processed with their consent.
Please note that we reserve the right to change or update the information, products or services offered on this website at any time without prior notice.
Please also note that our website also contains links to websites of other providers. Our privacy statement does not apply to these external websites.
Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
ELIGO Psychologische Personalsoftware GmbH
Arndtstraße 34
10965 Berlin
Telefon +49 30 403696-100
info@eligo.de
You can reach our data protection officer on: dsb@eligo.de
General information on data processing
1 Scope of processing personal data
We process personal data of our visitors only to the extent necessary to provide a functioning website as well as our content and services. Personal data of our visitors is normally only processed after they have given their consent. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and where the processing of the data is permitted by law.
2 Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Art. 6 para. (1) lit. b GDPR serves as the legal basis for processing personal data that is necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. (1) lit. c GDPR serves as the legal basis.
Art. 6 para (1) lit. d GDPR serves as the legal basis in the event that processing is necessary in order to protect the vital interests of the data subject or of another natural person.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.
3 Data erasure and storage period
The personal data of the data subject shall be erased or made unavailable as soon as the purpose of storage ceases to apply. In addition, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data shall also be made unavailable or deleted if a storage period prescribed by the aforementioned legal standards expires, unless there is a need to continue storing the data in order to enter into or fulfil a contract.
Provision of the website and creation of log files
1 Description and scope of data processing
Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data will be collected:
- Browser type and version
- Operating system used
- Website from which you visit our website (referrer URL)
- Website you visit
- Date and time of your access
- Your Internet Protocol (IP) address
This anonymous data is stored separately from any personal data you may have provided and thus does not allow any conclusions to be drawn about a specific person. This data is evaluated for statistical purposes in order to be able to optimise our Internet presence and our offers.
2 Legal basis for data processing
The legal basis for the temporary storage of the data is Art. 6 para. (1) lit. f GDPR.
3 Purpose of data processing
The temporary storage of the IP address by the system is necessary to facilitate the delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.
These purposes also constitute our legitimate interest in data processing according to Art. 6 para. (1) lit. f GDPR.
4 Duration of storage
The data shall be erased as soon as it is no longer needed for the original purpose of its collection. If data is collected for the purpose of providing the website, this is the case when the respective session has ended.
5 Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no possibility to object.
Use of cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When visitors access a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
When accessing our website, visitors are informed by an information banner about the use of cookies for analysis purposes and are referred to this privacy statement. They are also informed in this context about how the storage of cookies can be prevented in their browser preferences.
1 Legal basis for data processing
The legal basis for processing personal data using cookies is Art. 6 para. (1) lit. f GDPR.
2 Purpose of data processing
The purpose of using technically necessary cookies is to facilitate the use of websites for visitors. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
These purposes also constitute our legitimate interest in processing personal data according to Art. 6 para. (1) lit. f GDPR.
3 Duration of storage/ possibility of objection and removal
Cookies are stored on the user’s computer and transmitted by the latter to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be automated. If cookies are disabled for our website, you may no longer be able to fully use all of the website’s features.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”, to analyse how users use the site. The software places a cookie on the visitor’s computer (for cookies, see above). If individual pages of our website are accessed, the following data will be stored:
- Two bytes of the IP address of the user’s accessing system
- The accessed web page
- The website from which the visitor has reached the accessed web page (referrer)
- The subpages that are accessed from the accessed web page
- Time spent on the web page
- Frequency of access to the web page
The information generated by the cookie about your use of this website will usually be transmitted to and stored by Google on a server in the USA. However, if you have activated IP anonymisation on this website, Google will truncate your IP address within member states of the European Union or in other states which are party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage to the website operator. The IP address that your browser transmits in the context of Google Analytics will not be associated with any other data held by Google. You may set your browser software to refuse cookies before accessing the website, with the understanding that certain features of the website may not function properly without the aid of cookies. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing such data by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=en
1 Legal basis for data processing
The legal basis for processing the personal data of visitors is Art. 6 para. (1) lit. f GDPR.
2 Purpose of data processing
The processing of personal data of visitors allows us to analyse how users use our website. By evaluating the generated data, we are able to compile information about the use of individual components of our website. This helps us to constantly improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing data according to Art. 6 para. (1) lit. f GDPR. By using the IP anonymisation function, the interest of visitors in protecting their personal data is sufficiently accounted for.
3 Duration of storage
The data shall be erased as soon as it is no longer needed for the original purpose of its collection.
4 Possibility of objection and removal
In addition or as an alternative to the browser add-on, visitors can prevent tracking by Google Analytics on our pages via the following link: http://tools.google.com/dlpage/gaoptout?hl=en. For this purpose, an opt-out cookie will be installed on the device. This will prevent the collection of data by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in the browser.
YouTube videos
We embed YouTube videos on some of our web pages. The corresponding plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, Ca 94066, USA. When visitors visit a page with the YouTube plug-in a connection to YouTube servers is established. YouTube is informed about which pages you visit. If you are logged into your YouTube account, YouTube will be able to relate your browsing activities to your personal profile. You can prevent this by logging out of YouTube beforehand. When a YouTube video is started, the provider uses cookies that collect information about the user’s behaviour.
If you have disabled cookies for the Google Ad program you will not have to reckon with such cookies when viewing YouTube videos. However, YouTube also stores non-personal use information in other cookies. If you do not want this to happen, you must block the storage of cookies in your browser.
For more information on YouTube’s privacy policy, please read the provider’s privacy statement on: https://www.google.de/intl/de/policies/privacy/
Newsletter
On our website you have the possibility to subscribe to a free newsletter. When you sign up for our newsletter, the data from the input mask will transmitted to us.
For the processing of data, your consent is obtained during the signing-up process and reference is made to this privacy statement.
1 Legal basis for data processing
The legal basis for data processing after the visitor has signed up for the newsletter is Art. 6 para. (1) lit. a GDPR if consent has been given.
2 Purpose of data processing
The collection of the user’s e-mail address serves to deliver the newsletter.
3 Duration of storage
The data shall be erased as soon as it is no longer needed for the original purpose of its collection. Accordingly, the user’s e-mail address is stored for as long as the subscription to the newsletter is active.
4 Possibility of objection and removal
The newsletter subscription can be cancelled by the visitors concerned at any time. To this end, there is a corresponding link in each newsletter.
Contact form
A contact form is available on our website, which can be used to contact us electronically. If a visitor uses this option, the data entered in the input mask will be transmitted to us and stored. This data comprises:
- Email address
- Information provided in free text field
- Information provided in selection fields
- Date and time of registration
For the processing of the data, your consent is obtained during the transmission process and reference is made to this privacy statement.
Alternatively, you can contact us by using the e-mail address provided. In this case, we will store the user’s personal data transmitted with the e-mail.
We will not pass on the data to third parties in this context. The data will be used exclusively to process the conversation.
1 Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user’s consent has been given. The form can only be submitted after visitors have given their consent (acceptance checkbox).
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. (1) lit. f GDPR. If the aim of the e-mail contact is to enter into a contract, Art. 6 para. (1) lit. b GDPR serves as an additional legal basis for data processing.
2 Purpose of data processing
The processing of personal data from the input mask serves solely for us to process the contact established. If contact is established by e-mail, this also constitutes the necessary legitimate interest in data processing.
The other personal data processed during the transmission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
3 Duration of storage
The data shall be erased as soon as it is no longer needed for the original purpose of its collection. As regards the personal data from the input mask of the contact form and data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when the circumstances indicate that the matter in question has been conclusively clarified.
4 Possibility of objection and removal
The user has the possibility to revoke his or her consent to the processing of personal data at any time. If visitors contact us by e-mail, they can object to the storage of their personal data at any time. In this case, the conversation cannot be continued.
Support contact form
A support contact form is available on our website, which can be used to contact us electronically if you have questions or problems with processing our online assessments. If a visitor uses this option, the data entered in the input mask will be transmitted to our ticket system and stored there. This data comprises:
- E-mail address
- Information provided in free text field
- Information provided in selection fields
- Date and time of registration
For the processing of the data, your consent is obtained during the transmission process and reference is made to this privacy statement.
Alternatively, you can contact us by using the e-mail address provided. In this case, we will store the user’s personal data transmitted with the e-mail.
We will not pass on the data to third parties in this context. The data will be used exclusively to process the conversation.
1 Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. (1) lit. a GDPR if the user’s consent has been given. The form can only be transmitted once the requesting party has given their consent (acceptance checkbox).
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. (1) lit. f GDPR.
2 Purpose of data processing
The processing of personal data from the input mask serves for us solely to handle inquiries regarding the handling of our online assessments. If contact is established by e-mail, this also constitutes the necessary legitimate interest in data processing.
3 Duration of storage
The data shall be erased as soon as it is no longer needed for the original purpose of its collection.
4 Possibility of objection and removal
The visitor has the possibility to revoke his or her consent to the processing of personal data at any time. If visitors contact us by e-mail, they can object to the storage of their personal data at any time. In this case, the conversation cannot be continued.
Rights of data subjects
1 Right of access
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed by us.
Where that is the case, you have the right to demand access to the personal data and the following information:
- the purposes of the processing of your personal data;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data has been or will be disclosed;
- the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data is not collected from the data subject, any available information as to its source;
- the existence of automated decision-making, including profiling, referred to in Article 22 paras. (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information on whether personal data concerning you is transferred to a third country or an international organisation. In this context, you may demand to be informed about the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
2 Right to rectification
You have the right to obtain from the controller rectification and/or completion, if the processed personal data concerning you is inaccurate or incomplete. The controller shall rectify the data without undue delay.
3 Right to restriction of processing
You have the right to obtain from the controller restriction of processing of personal data concerning you where one of the following applies:
- if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
- if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
- if the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
- if you have objected to processing pursuant to Article 21 para. (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
Where the processing of personal data concerning you has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing pursuant to the requirements above, you shall be informed by the controller before the restriction of processing is lifted.
4 Right to erasure
4.1 Obligation to erase personal data
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- You withdraw consent on which the processing is based according to Article 6 para. (1) lit. a, or Article 9 para. (2) lit. a GDPR, and where there is no other legal ground for the processing.
- You object to the processing pursuant to Article 21 para. (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 para. (2) GDPR.
- The personal data concerning you has been unlawfully processed.
- The personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- The personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8 para. (1) GDPR.
4.2 Notification of third parties
Where the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17 para. (1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to notify controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.
4.3 Exceptions
The right to erasure shall not apply insofar as the processing is necessary:
- for exercising the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 para. (2) lit. h and i and Art. 9 para. (3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89 para. (1) GDPR, insofar as the right referred to in clause a) is likely to render impossible or seriously impair the achievement of the purposes of that processing; or
- for the establishment, exercise or defence of legal claims.
5 Right to be informed
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller shall be obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about these recipients by the controller.
6 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 para. (1) lit. e or f GDPR, including profiling based on these provisions.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data concerning you is processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications
7 Right to withdraw declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
8 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.