At PPI AG, we take the protection of your privacy in the collection, processing and use of your data very seriously.
The following explanation provides an overview of how we guarantee data protection and what kind of data is collected for which purpose.
Making our website accessible
When you visit our website, our web servers automatically save the following data:
The data is saved to ensure the functionality of the website. The data is also used to optimise the website and to safeguard the security of our IT systems. We also process this data to detect and track misuse. In this regard, the legal basis is Article 6, subparagraph 1, point (f) of the General Data Protection Regulation (GDPR). Our legitimate interest in processing the data is to ensure that our website functions properly and to safeguard the transactions processed by means thereof.
The data is stored in the log files of our servers for four weeks and then deleted automatically.
In this regard, the data is not evaluated for marketing purposes.
Your personal data will however be processed if you provide it to us, for example, in the context of a request or placing an order for information or registering for a newsletter. This is based on the provisions of Article 6, subparagraph 1, point (b) of the GDPR.
The data is in the control of:
PPI AG, Moorfuhrtweg 13, 22301 Hamburg, Germany
Phone: +49 40 227433-0
Fax: +49 40 227433-1333
Data protection officer
If you have further questions regarding the processing of your personal data, you can contact our data protection officer directly, who is also available to you should you wish to request information, request that an action be taken or make a complaint:
Data protection officer
22301 Hamburg, Germany
PPI AG will only transfer data relating to the use of the electronic services to third parties in accordance with the applicable statutory provisions if there is a legal obligation to do so (such as disclosures to public authorities) or if this is necessary for the enforcement of our rights (such as claims arising from a contractual relationship).
In addition, we will only disclose data to external service providers in such instances where this is necessary for the provision of products and services and a contractual agreement has been concluded. These instruction-bound service providers or processors will only use the data in terms of a contract for the purpose of performing their obligations.
Under no circumstances will the collected data be sold. Our employees are obliged to maintain and safeguard the confidentiality of the personal data provided to us.
We protect your data by means of technical and organisational security measures to prevent the accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures, such as data encryption, are regularly improved in accordance with the development of the technology.
By means of the contact details provided to us, we regularly inform you by telephone, e-mail, fax or post about our products, services, newsletters (such as Basel III) and themed events (such as seminars and conferences).
You only receive this information if you have consented to your data being processed for the purpose of receiving advertising (Article 6, subparagraph 1, point (a) of the GDPR).
The processing of your data for the purpose of advertising, insofar as this is permitted without your consent, is then in terms of our interest to provide you with the requested information (for example, about our products and services and themed events) and to give you the best possible support (Article 6, subparagraph 1, point (f) of the GDPR).
Your data will be retained in the systems until you request the deletion of your data.
If you use our website to submit your application online via our career portal (www.ppi.de/karriere), your data will be securely transmitted to us and stored in our application system in terms of your consent in accordance with Article 6, subparagraph 1, point (b) of the GDPR. We collect different types of information in this regard. In particular, this includes your personal information with your contact details as well as a description of your education, work experience and skills. You also have the option of providing us with electronically saved documents, such as references or your covering letter.
The data transmitted to us for a contract of employment is saved in compliance with the statutory requirements for the purpose of entering into an employment relationship. Should we be unable to offer you employment within the scope of the application process, we will delete your data after six
a) This website uses the following types of cookies, the scope and function of which are explained below:
b) Transient cookies are automatically deleted when you close the browser. In particular, these include session cookies. They save a session ID with which the various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings in accordance with your wishes, for example, to accept third-party cookies or to reject all cookies. In this event, please note that you may not be able to use all the features of the site.
Our website uses the counting pixel technology of wiredminds GmbH (www.wiredminds.de) to analyse visitor behaviour.
This may result in data being collected, processed and stored from which user profiles are created under a pseudonym. Where possible and appropriate, these usage profiles are completely anonymised. Cookies can be used for this purpose. Cookies are small text files that are stored in the visitor’s web browser and are used to recognise the web browser. The collected data, which may also contain personal data, is transmitted to wiredminds or collected directly by wiredminds. The information that is left by visits to the websites may be used by wiredminds to create anonymised user profiles. Unless the person concerned has specifically granted their consent, the data thereby obtained will not be used to identify the visitors to this website personally and it will not be merged with the personal data of the bearer of the pseudonym. Insofar as IP addresses are recorded, they are immediately anonymised by deleting the last number block. https://www.wiredminds.de/datenschutz/#c874
On our website, you can subscribe to a free newsletter from PPI on relevant topics or sectors. On registration, your data is transmitted to us from the input mask (title, first name, name, company, e-mail address).
The newsletter is sent to you on the basis of your registration on our website and your consent in terms of Article 6, subparagraph 1, point (a) of the GDPR. Your e-mail address is collected for the purpose of providing you with the newsletter. The collection of other personal data in the context of the registration process serves to prevent the misuse of the services or the e-mail address used. In addition, reference is made to this data protection policy within the context of the registration. The only direct advertising sent via the newsletter is for PPI’s own services. The data will only be used by us for the purpose of sending the newsletter.
Your data will be retained in the systems until you unsubscribe from the newsletter or you request the deletion of your data.
Google is certified under the Privacy Shield Frameworks and thereby guarantees that it complies with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google uses this information on our behalf to evaluate the use of our online content by users, to compile reports on activities in relation to this online content and to provide us with further services in relation to the use of this online content and the Internet. Pseudonyms for the user profiles may be created from the processed data of the users.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of users within member states of the European Union or in other states that are parties to the agreement on the European Economic Area will be truncated by Google. The full IP address will only be transferred to a Google server in the USA and truncated there in exceptional cases.
The personal data of users will be deleted or anonymised after 14 months.
We maintain an online presence within social networks and platforms in order to communicate with customers, prospective customers and users who are active there and to be able to inform them about our services. When using the respective networks and platforms, the terms and conditions and the data processing policies of the respective provider apply.
Unless otherwise specified in our data protection policy, we process the data of users if they communicate with us on social networks and platforms, for example, if they post contributions to our online presence or send us messages.
This content uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are identifiable by one of the Facebook logos (a white “f” on a blue tile or a “thumbs up” sign) or are marked by the addition of “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/
When a user makes use of this content by visiting a web page that contains such a plugin, the user’s browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser which incorporates it into the website. Consequently, the provider has no influence on the amount of data that Facebook collects with the assistance of this plugin and therefore informs users to the extent of its knowledge:
By embedding the plugins, Facebook receives the information that a user has accessed the relevant page of the content offered. If the user is logged into Facebook, Facebook can assign the visit to the user’s Facebook account. If users interact with plugins, for example, by clicking a Like button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a user does not have a Facebook account, Facebook may nevertheless be able to collect and save the user’s IP address. According to Facebook, only an anonymised IP address is stored for users in Germany.
If a user has a Facebook account and does not want Facebook to collect data about the user via the content offered and associate it with the user’s account data stored on Facebook, the user needs to log out of Facebook before visiting the website.
Facebook social plugins can also be blocked by means of add-ons for your browser, for example with the Facebook Blocker.
This content uses the +1 button of the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”). The button is recognisable by a “+1” sign on a white or coloured background.
When a user makes use of this content by visiting a website that contains such a button, the browser establishes a direct connection to the Google servers. The content of the +1 button is sent by Google directly to the user’s browser and embedded by it into the website; the provider therefore has no influence on the amount of data that Google collects via the button. According to Google, no personal data is collected unless the button is clicked. This data, including the IP address, is then only collected and processed in respect of members who are logged in.
The online content that we provide may include certain functions and content of the Xing service provided by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. This may include content, such as images, videos or text, and buttons that users can use to express their approval of the content and the authors of the content, or subscribe to our posts. If the users have a Xing account, using the above-mentioned content and functions can be used by Xing to assign such use to the profiles of their users. The data protection policy of Xing: https://www.xing.com/app/share?op=data_protection
We use Shariff buttons for the protection of privacy. Shariff was developed to provide greater privacy in the Internet and to replace the usual “share” buttons of social networks. Here it is not the user’s browser but the server on which the online content is located that establishes a connection to the server of the respective social media platform and requests, for example, the number of likes, etc. Thereby, allowing the user to remain anonymous. For more information about the Shariff project, refer to the developers at c't magazine: www.ct.de.
In terms of Article 15 the GDPR, you always have the right receive information about the origin, recipient, purpose and duration of data processing of the data retained by us in respect of you. You can submit a request by post or e-mail to the addresses provided below.
You have the right to demand the rectification of your personal data without undue delay if it is inaccurate (Article 16 of the GDPR). In this regard, please make use of the contact addresses set out below.
You have a right to the erasure (“right to be forgotten”) of your personal data without undue delay if one of the legal grounds in terms of Article 17 of the GDPR applies. Such grounds apply:
In order to assert your right to erasure, please make use of the contact addresses provided below.
You have the right to restrict processing if one of the conditions applies in accordance with the provisions of Article 18 of the GDPR. Thereafter, the restriction of processing may be required, in particular, if the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead or if the data subject objects to the processing pursuant to Article 21, subparagraph 1 of the GDPR pending verification of whether our legitimate grounds override your rights. In order to assert your above-mentioned right, please make use of the contact addresses provided below.
You have the right to data portability in terms of Article 20 of the GDPR. You have the right to receive the data concerning you, which you provided us with, in a conventional, structured and machine-readable format and to have this data transferred to another controller, such as another service provider. This is subject to the conditions that the processing is based on consent or on a contract and can be carried out using automated procedures. In order to assert your above-mentioned right, please make use of the contact addresses provided below.
You have the right to object, at any time, in terms of Article 21 of the GDPR on grounds relating to your particular situation to the processing of your personal data which is based, inter alia, on point (e) or (f) of subparagraph 1 of Article 6 of the GDPR. In which event, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the purpose of asserting, pursuing or defending a legal claim. In order to assert your above-mentioned right, please make use of the contact addresses provided below.
You have the right to lodge a complaint in terms of Article 77 of the GDPR with the competent supervisory authority if you are of the opinion that the processing of your personal data is unlawful:
Free and Hanseatic City of Hamburg
The Hamburg Commissioner for Data Protection and Freedom of Information
Please note that we update this data protection policy from time to time so that it always complies with the most recent legal requirements and covers all our content. The latest version applies subject to the following update notice.
Your statutory rights to information, rectification, restriction, erasure and to raise an objection shall remain unaffected by any such amendment.
Last update: 10.07.2018