Our Privacy Policy at ALVARA | Digital Solutions

Privacy policy for this website

In this privacy policy, we – the ALVARA | Digital Solutions company group – inform you, as a visitor to our website (www.digital.alvara.eu), about the processing of your personal data within the scope of our company group’s joint responsibility.

1. Name and contact details of the data controller

Within the group of companies, the processing of your personal data is carried out by the following controller:

If you have any questions or comments regarding the processing of your personal data, the data protection officer of ALVARA Holding GmbH will be happy to assist you as a central contact.

ALVARA Holding GmbH
Data Protection Officer
Querstraße 18
04103 Leipzig
Germany
Email: datenschutz@alvara.eu

However, you are free to contact any data protection officer or contact person of the group of companies.

2. Purpose and nature of the processing of your personal data

We process your personal data at the times and for the purposes described below.

2.1 Statistical evaluations and website protection

Upon visiting our website, www.digital.alvara.eu, server log files are automatically written.

The following is logged:

• Time of access
• Type of access
• Device ID or unique ID
• Device type
• Computer and connection information
• Response time
• Browser type (including version)
• Referring website (ref URL)
• IP address

And further standard web log information

Your personal data is processed for the following purposes:

• Statistical evaluations
• Optimization of operation and security
• Identification of illegal use and attacks on our website to guarantee data protection

Your personal data is processed based on the legal basis of article 6 paragraph 1 sentence 1 f. of the GDPR. As the website operator, we have a legitimate interest in ensuring the security and availability of our website.

Server log files are processed separately and without relation to personal data entered on our website. The data will never be used to identify data subjects.

2.2 Analysis Tools

Our website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Analytics uses cookies that are saved to your computer and that facilitate the analysis of your website use. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. Google reserves the right to use this personal data for its own purposes (e.g. profiling or cross platform tracking).

Your data is processed based on your consent in accordance with article 6 paragraph 1 sentence 1 4 in conjunction with article 49 paragraph 1 sentence 1 a of the GDPR. Data distributed in the USA is subject to greater risks. Google is subject to national laws that obligate it to publish your personal data to the US authorities. Furthermore, national US laws do not grant you any data protection rights that you can pursue with the US authorities.

You can find out which cookies are used by Google Analytics under 6 Cookies.

2.3 Contact / Newsletter subscription

If you enter into contact with us, e.g. by using the contact form provided on our website, or subscribe to our newsletter, you are considered an interested party.

You can find more information on the processing of your personal data as an interested party in our company group in our privacy policy for business partners and interested parties.

2.4 Career site / applications

We use the Empfehlungsbund job advertisement widget of pludoni GmbH to display job advertisements of our company on certain areas of our web presence (career website). When you visit our career website, a one-time secure connection is established via HTTPS to https://bms.empfehlungsbund.de. This connection setup is necessary so that our job advertisements can be displayed. Log files are created that contain access data (name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider). Log files are processed for the purpose of troubleshooting and for security reasons (e.g. to clarify acts of abuse or fraud) and stored for a maximum period of 3 months, after which they are deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until the final clarification of the respective incident. The legal basis according to DSGVO is Art. 6, Para. 1b, or Art. 28 (order processing). As a contractor, pludoni GmbH processes all accruing data on our behalf. For detailed information on the processing of your data in connection with the Empfehlungsbund job advertisement widget, please refer to the separate privacy policy of pludoni GmbH.

You can find further information on how your personal data is processed in the context of an application with us in our data protection declaration for applications

3. Shared responsibility

Within the framework of joint responsibility, the group of companies has concluded a joint responsibility agreement. You can read the essential information pursuant to Art. 26 (2) GDPR by clicking on the following link.

4. Disclosure of your personal data to third parties

We will only share your personal data with third parties if:

• You have given us specific consent in accordance with Art. 6. (1) (1) GDPR for the transfer of your personal data
• The disclosure is necessary on the basis of Art. 6 (1) (f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of the data
• We are legally obliged to disclose data pursuant to Art. 6 (1) (c) GDPR
• The disclosure is legally permissible and necessary for the processing of an existing or pending legal transaction in accordance with Art. 6 (1) (b) GDPR.

In all other cases, your personal data will not be passed on to third parties.

5. Services and contents of third parties

Within our offer we can display or refer to third party content (for example maps from Google Maps, articles on our YouTube channel, information on our Twitter or Xing profile, etc.). When you access this content, your IP address is transmitted to the provider (hereinafter "third party provider"). This is a technical necessity and always happens when you access a page on the Internet.

However, we have no influence on whether or not the third party provider stores your IP address.

Furthermore, the third party provider may receive information from your browser as to which page of our website you came to it from. The third party provider is responsible for the use of this information. We cannot influence this.

6. Cookies

In order to achieve a comfortable handling of our offer, cookies are used. These simplify and speed up your visit to our website, and allow us to gain information about your use of our website. Cookies are small text files that are stored on your computer. If you do not wish this, you can deactivate cookies in your browser settings and select the browser setting so that you are informed when cookies are used on a website.

Our website uses the following cookies.

6.1 Necessary cookies 

6.2 Non-necessary cookies

You can change your settings for the use of cookies on this website at any time by clicking the button below.
Cookie Settings

7. Duration of storage of your personal data

Your personal data shall be deleted after your consent has been revoked, your request has been processed or after the expiration of statutory retention periods in accordance with established deletion concepts.

8. Data subjects' rights

As a data subject, you have the right:

• In accordance with Art. 15 GDPR, the right receive information from us free of charge within the legal framework as to whether we process personal data about you. If this should be the case, you also have the right to request information about the data, their processing purpose, the recipients (in the case of data transfer) and their origin
• In accordance with Art. 16 GDPR, the right immediately demand the rectification of incorrect or incomplete personal data stored by us
• In accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless the processing is necessary on our part for the free expression of opinion and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims
• In accordance with Art. 18 GDPR, the right to request the restriction of the processing of your personal data if the accuracy of the personal data is disputed by you or the processing is unlawful, but you refuse erasure or the personal data is no longer required by us, but you need it to assert, exercise or defend legal claims or you have objected to the processing of your personal data pursuant to Art. 21 GDPR
• In accordance with Art. 20 GDPR, the right to receive your personal data processed by us in a structured, common and machine-readable format or to request the transfer of this same personal data to another controller
• In accordance with Art. 7 (3) GDPR, you may revoke your consent at any time. As a result, we may and will no longer process the personal data affected by this consent from the time of revocation
• In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.

ALVARA Holding GmbH is at your disposal as a central contact point for the assertion of your data subject rights. However, you are free to contact any company in the group of companies.

Furthermore, the following supervisory authorities are responsible for the companies in the group of companies:

9. Right of objection

If your personal data is processed on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR or on the basis of consent granted pursuant to Art. 6 (1) (a) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that grounds for doing so arise from your particular situation.

You have a general right to object to the processing for direct advertising on the basis of Art. 6 (1) (f) GDPR, which is implemented directly by us without any special circumstances on your part.

In order to make use of your right to object in accordance with Art. 21 GDPR, it is sufficient, for example, to send an email to our aforementioned contact details.