The controller for the data processing is the website operator (“we“):
Intelliant GmbH (“Intelliant”)
If you have any questions about data protection at Intelliant, please don’t hesitate to contact email@example.com.
2. Data processing
The type, scope and purpose of the processing of personal data depend on which Intelliant services are used. We will process specific personal data required for each particular service and depending on the respective group of data subjects (e.g. Website visitors, Newsletter subscriber).
3. Website Services
The data subjects with regards to the services provided through the Intelliant website are all Website visitors.
3.1. Provision of the Website
The legal basis for the processing is art. 6 para. 1 (b) GDPR (performance of a contract). In order to make the website available at all, to enable basic functions and proper operation, it is technically necessary to process personal data. Although this is basically device data, this data may be used to establish a reference to the website visitor.
For example, the IP addresses of the end devices used, identifiers of the end devices used, the operating systems and the browsers must be processed in order to establish a connection at all between the end devices and the server on which the website is hosted and to display the content in the intended layout.
3.2. Security of the Website
In order to ensure the security of the Website, the data is processed by accessing the Website as server log files. Although these are basically device data, with this data may possibly be made the reference to the Website visitors. These data are matched against existing attack vectors and evaluated when detected attacks.
Data stored in the server log files includes previously visited websites, date and time of the access, the amount of data sent in bytes, the URL of the previously visited website, the internet browser and the operating system used.
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the server log files, the maximum storage period is 7 days. If data needs to be retained for evidence, it will be exempted until the incident is finally resolved.
The legal basis for the processing is art. 6 para. 1 (f) GDPR (legitimate interest).
3.3. Range Measurement & Optimization of Our Offer
We use Matomo for web analysis, a service of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, (“Matomo”).
As a data protection service provider, Intelliant only relies on secure and anonymous solutions on the Website. Therefore, Matomo is configured data protection-friendly to anonymize processed personal data, so that Intelliant cannot draw any conclusions about your person.
The legitimate interest in range measurement and the optimization of the Website serves as legal basis according to art. 6 para. 1 (f) GDPR.
Please find more information on data protection at Matomo here.
4. Communication Services
The data subjects with regard to the contact form are all Website visitors who use the contact form to get in contact with Intelliant.
Intelliant offers the option to get in contact with us directly via the website. To this end, we have integrated forms on our website. For us to be able to reply to your message, we require your e-mail address. Further, to allow us to address you appropriately, we kindly ask you to provide your name and if relevant your company name – both fields are optional.
We process the above personal data in order to evaluate your message and to contact you.
The collection and processing of your personal data for the purpose of contacting us and receiving a reply is based on the legitimate interest according to art. 6 para. 1 (f) GDPR to enable the intended communication.
The data subjects with regards to the newsletter are the newsletter subscribers (“subscriber”).
The newsletter can be subscribed through the Website. It is a separate, free information service that can be used independently of any customer relationship.
By consenting to receive the newsletter, the subscriber agrees to a (future) e-mail service, providing regularly information on professional news and publications in Intelliant’s fields of business, as well as information on relevant business developments and events at Intelliant.
For the newsletter service, Intelliant requires the e-mail address in order to provide the newsletter, as well as the name and last name to be able to address the subscriber personally and avoid abuse. After registering for the newsletter, the subscriber will receive an e-mail. This e-mail has a link with which the subscriber must confirm the registration to the newsletter service. We will send the newsletter only after the conformation has taken place (double opt-in).
The subscriber can unsubscribe from the newsletter at any time. Each newsletter contains information on how to unsubscribe from the newsletter with effect for the future. Alternatively, the request to unsubscribe can be sent to us via e-mail at any time.
Intelliant uses the service […] for the provision and management of the newsletter.
The legal basis for the processing is art. 6 para. 1 (a) GDPR (consent).
4.3 Social Media
Intelliant is active on various social networks for marketing purposes. On the Website, simple links to the Intelliant company profile on each of these social networks can be found.
5. Application process – Career at Intelliant
The data subjects with regards to the application process at Intelliant are all candidates applying to open positions at Intelliant.
If you apply to Intelliant, your personal data is processed to facilitate the entire application process on the legal bases under art. 6 para. 1 (b) and (f) GDPR.
The following categories of personal data will be collected and processed during the application process:
Any personal information you provide through our application form, including, but not limited to: full name, e-mail address, telephone number, location, CV, cover letter, image, educational data, status, notes and planning related to your application and e-mail communication.
Intelliant will store the application including the provided personal data in the recruitment process for a period of 6 months after the hiring decision for preventive reasons.
Under European data protection law, we are obliged to inform you that the retention of personal data in your application may put you at a disadvantage compared to other applicants who apply for the same role.
Please note that Intelliant will only process applications submitted through the career section on the Website. E-mail applications cannot be considered for data protection reasons.
6. Rights of Data Subjects
If your personal data is being processes, you are data subject as defined by GDPR. Consequently, you have the rights described in articles 15 to 21 GDPR in relation to the controller. In order to exercise your rights or to obtain further information on data protection regarding Intelliant, please contact our data protection officer by sending an e-mail to firstname.lastname@example.org.
6.1. Right of Access
In accordance with article 15 GDPR you have the right to request confirmation from the controller as to whether your personal data is being processed. If this is the case, you also have the right to receive free information regarding all your personal data being processed by Intelliant and the right to receive a copy of such personal data.
Additionally, in accordance with article 19 GDPR you have the right to request the controller information regarding the recipients to whom your personal data has been forwarded to.
6.2. Right to Rectification
In accordance with article 16 GDPR you have the right to request the rectification for your personal data if it is either incorrect or incomplete.
6.3. Right to Erasure
If your request does not conflict with a legal obligation to retain data, you have the right to have your personal data deleted in accordance with article 17 GDPR. Your personal data stored with the controller will be deleted if such data is no longer needed for its intended purpose and is not subject to any statutory retention period. If the deletion cannot be carried out due to a legal obligation to retain such data, the processing of the personal data will be restricted, in which case the data shall be stored and not processed for any purpose. The deletion of your data implies that the services of Intelliant can no longer be used in full or not at all.
We are obliged to delete personal data immediately if the processing is not required anymore, as well as for any of the following reasons:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- You have revoked your consent to processing and there is no other legal basis for processing;
- You have objected to the processing pursuant to article 21(1) GDPR and there is no overriding legitimate basis for the processing, or you have objected to the processing pursuant to article 21(2) GDPR;
- The personal data was processed unlawfully;
- The deletion of your personal data is required to fulfill a legal obligation under German or European law.
If we have made your personal data public and is required to delete it, we will take appropriate measures to inform our data processors who process your personal data of your request, so that, taking into account the available technology and implementation costs, they delete your personal data, links to or copies of such personal data. The measures are taken only to the extent that the processing is not required.
6.4. Right to Restriction of Processing
In accordance with article 18 GDPR you have the right to request the controller to limit the processing of your personal data if one of the following conditions is met:
- You have contested the accuracy of the personal data. In this case the processing is restricted for a period of time which enables the controller to verify the accuracy of your personal data;
- The processing is unlawful, and you have opposed to the deletion of personal data and instead requested a restriction on the use of your personal data;
- The controller no longer needs your personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of a legal claim;
- You have objected to the processing under article 21 (1) GDPR and the verification of whether the legitimate bases of the controller override those of the data subject are still pending.
If the processing of personal data has been restricted in accordance with the conditions above, the processing of such data may only take place – with the exception of storage – with your consent or for the purpose of establishing, exercising or defending rights or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the processing is restricted, we will notify you before the restriction is lifted.
6.5. Data Portability
You have the right, in accordance with article 20 GDPR, to receive your personal data which you have made available to the controller, in a structured, common and machine-readable format.
Additionally, you have the right to transfer your personal data by yourself or through us directly to another controller, as far as this is technically possible and the rights and freedoms of third parties are not affected.
6.6. Right to Object
In accordance with article 21 GDPR you have the right to object at any time to the processing of your personal data which is based on points (e) or (f) of article 6 para. 1 GDPR.
If you would like a correction, blocking, deletion or information regarding your personal data we store, or if you have questions regarding the collection, processing or use of your personal data, or if you wish to revoke your consent, please contact the data protection officer by sending an e-mail to email@example.com.
6.7. Revocation of your Consent
If Intelliant processes your personal data based on consent, you have the right to revoke your consent to the processing at any time and with effect for the future.
All you need to do is send an e-mail to firstname.lastname@example.org.
6.8. Submitting a Complaint to the Supervisory Authority
Finally, in accordance with article 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for the controller:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Visitors entrance: Puttkamerstr. 16 – 18
10969 Berlin, Germany
Phone: 030 13889-0
Updated: January 2021