1.1 Log files
Every time you access the website and depending on the use of certain functions on it, data such as the date and time of access, your IP address and the content accessed by your browser are transmitted to our server and stored in log files in order to provide you with the requested content and to ensure the functionality and security of our systems.
The log files are deleted or anonymized after seven days at the latest. If and as long as there is a suspicion of security-related access, the relevant data will be stored for the duration of the investigation of the potential attack and, if necessary, the implementation of countermeasures, in particular the enforcement of legal claims.
The legal basis for the aforementioned processing is our interest in a stable and secure website (Art. 6 para. 1 sentence 1 lit. f GDPR).
Specifically, the following data categories are processed in this context:
- Time (date and time) of the request
- URL of the requested content
- IP address
- Amount of data transferred
- Access status (e.g. “file transferred” or “file not found”)
The data mentioned will not be passed on to third parties.
Without the provision of this data, the use of the website is not possible.
1.2 Cookies
We use cookies to enable and optimize the use of our website. In addition to cookies that are necessary for session control, we use persistent cookies to store preferences (e.g. language settings). You can disable cookies in your browser, but this may affect the use of certain functions. Since cookies are used in various services on the website, we provide information about the respective processed data categories in the information on the respective service.
1.3 Borlabs Cookie
We use the consent management tool “Borlabs Cookie” from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. This tool enables us to record and manage our users’ consent to the use of cookies and similar technologies in a legally compliant manner.
When you visit our website, Borlabs Cookie stores a cookie in your browser to record and document the consent given or refused for the individual cookie categories. This cookie does not store any personal data, but only your consent (or refusal) to the use of certain cookies and an anonymized identification code, which on the one hand enables the assignment of consent and on the other hand avoids a new request as long as the settings are not changed.
We use Borlabs Cookie on the basis of our interest in operating a website with user-friendly consent management (Art. 6 para. 1 sentence 1 lit. f DSGVO) and are also obliged to provide evidence of data protection conformity (Art. 6 para. 1 sentence 1 lit. c DSGVO).
The consent data is stored for the legally required duration and then automatically deleted. You can change your cookie settings and consent at any time by clicking on the orange shield icon with the fingerprint in the lower right corner of this page and adjusting your preferences or revoking consent there.
Further information on data processing by Borlabs Cookie can be found in the privacy policy of Borlabs GmbH at https://borlabs.io/privacy/
You can voluntarily provide personal or business data to use certain services on our website (e.g. contact forms). This data is used exclusively to provide the respective service.
The legal basis for this is Art. 6 (1) (b) GDPR. The data will be deleted after the respective service has been provided, provided that there are no statutory retention requirements.
3.1 Matomo
Our website uses Matomo, an open-source software for analyzing visitor access. Your IP address will be shortened and anonymized. The pseudonymized user data generated will not be passed on to third parties and will be used exclusively to improve our website.
The processing is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) point f GDPR.
3.2 Google Tag Manager
We use Google Tag Manager on our website. This is a tool from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), which allows us to centrally manage and execute certain tags and codes for tracking and analysis tools on our website.
Google Tag Manager itself does not process any personal data, but only allows the management of tags used by other services that may collect/process data.
Data transfer to Google servers in the US cannot be ruled out. Google is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR) to ensure an adequate level of data protection. For more information, please refer to Google’s privacy policy at https://policies.google.com/privacy.
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, which you can declare and revoke via the consent management tool used on the website. You can adjust your privacy settings by clicking on the orange shield icon with the fingerprint in the lower right corner of this page.
3.3 Google Analytics
We use the “Google Analytics” analysis tool, a Google service, to evaluate visits to this website so that we can continuously optimize our website. The following information in particular is processed:
- IP address (truncated);
- (sub)pages accessed;
- visitor behavior on the pages (e.g. clicks, scrolling behavior and length of stay);
- the visitor’s approximate location (country and city);
- technical information such as the browser used, internet service provider, end device and screen resolution;
- the source of your visit (i.e. which website or advertising medium you came to us through);
You can prevent these cookies from being set by selecting the appropriate settings on your browser software, as described under “Cookies”.
We collect the IP address so that the analysis service can distinguish between different visitors and so that we can see which countries, regions and cities our visitors come from. However, we shorten the IP address during collection so that we cannot specifically identify you.
The legal basis for the processing is your consent in accordance with Art. 6 (1) 1 lit. a GDPR, which you can declare and revoke via our consent management tool.
Data from each individual visit is deleted 14 months after it is collected.
Google Analytics is provided by Google LLC, USA, which receives your data in order to provide us with the analysis service.
Your data will be transmitted to the USA as described. Google is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed to ensuring an adequate level of data protection on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR). For more information, please refer to Google’s privacy policy at https://policies.google.com/privacy.
3.4 Microsoft Advertising
We use Microsoft Advertising, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”), on our website. This service allows us to display targeted ads to visitors who have previously shown an interest in our offers.
Microsoft Advertising uses cookies and similar technologies that collect information about user behavior when users arrive at our website via a Microsoft ad. In doing so, data such as the IP address or a Microsoft Advertising ID is processed to analyze user behavior and to evaluate the success of our advertising campaigns.
Microsoft is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed on the basis of the standard contractual clauses (SCC) of the European Commission (Art.46 GDPR) to ensure an adequate level of data protection. For more information, please refer to the Microsoft privacy policy at https://privacy.microsoft.com/de-de/privacystatement.
The processing operations mentioned are based on your consent (Art. 6 (1) 1 lit. a GDPR), which you can declare and revoke at any time via our Consent Management Tool.
The data collected by cookies is stored for the time necessary to evaluate the advertising campaigns and is automatically deleted after 180 days at the latest. You can object to the use of Microsoft Advertising by adjusting the corresponding cookie settings in your browser or by using tools to disable Microsoft Ads cookies, as described in the Microsoft Privacy Statement.
3.5 Facebook Pixel
This website uses Facebook Pixel, an analysis service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This service allows us to track user behavior when they access the website via a Facebook ad. This enables us to measure the effectiveness of ads and optimize our marketing efforts.
We use this service to collect information about the actions you take on the website (e.g. clicks or visits to certain pages). If you are a Facebook member, this data is linked to your Facebook account and used for targeted advertising. Facebook may link the collected data with other information about you that Facebook has collected itself.
The legal basis for the use of the service is your consent (Art. 6 (1) 1 lit. a GDPR), which you can declare and revoke at any time via our Consent Management Tool.
The data mentioned can also be transferred to the USA. Facebook is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR) to ensure an adequate level of data protection. Further information on data processing by Facebook can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy.
The data mentioned will be stored for as long as necessary for the purposes mentioned above. You can prevent the use of Facebook Pixels at any time by withdrawing your consent or adjusting the personalized advertising settings in your Facebook account.
3.6 LinkedIn Pixel
We use the LinkedIn Insight Tag (“LinkedIn Pixel”) on the website, an analysis and conversion tracking tool from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The LinkedIn Insight Tag helps us to track the behavior of users on our website who come to us via a LinkedIn ad, and thus to evaluate and improve the effectiveness of our advertising campaigns.
The service processes data such as your IP address, browser properties and referrer URL, as well as information about actions you take on our website (e.g. pages visited). This data is pseudonymized and LinkedIn anonymizes it after seven days so that it can no longer be linked to individual persons. However, LinkedIn can link the data to your LinkedIn account and use it for targeted advertising.
The legal basis for the use is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), which you can declare and revoke at any time via our Consent Management Tool.
The data mentioned may also be transferred to the USA and other third countries. LinkedIn is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed to ensuring an adequate level of data protection on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR). For more information about LinkedIn’s data processing, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy and https://www.microsoft.com/en-gb/privacy/privacystatement.
The data is stored for up to 90 days and then anonymized. You can opt-out of the LinkedIn Insight Tag by adjusting your cookie settings on our website or by changing the settings for interest-based advertising in your LinkedIn account.
3.7 LeadLab
We use “LeadLab” on our website, a web analysis tool from WiredMinds GmbH, Lindenspürstraße 32, 70176 Stuttgart, Germany. The service collects and analyzes visitor behavior on the website to help us optimize the website and identify companies (not natural persons) that visit our website.
The service collects information about the use of our website, such as IP address, access time and pages viewed. However, the IP address is anonymized immediately after collection, so that it is not possible to draw conclusions about individual persons. Personal data is therefore not stored when using the website.
We base the collection and immediate anonymization of the IP address on our interest in effective marketing (Art. 6 (1) (f) GDPR).
You can object to the aforementioned data collection at any time with effect for the future by adjusting your cookie settings. Further information and the option to deactivate tracking can be found in the WiredMinds data protection declaration at https://wiredminds.de/en/wiredminds/privacy/.
The aforementioned data is stored for as long as it is needed to create anonymous usage statistics and is then automatically deleted.
3.8 WPML (WordPress Multilingual Plugin)
We use the WordPress plugin “WPML” (“WordPress Multilingual Plugin”) from OnTheGoSystems Ltd, 22/F 3 Lockhart Road, Wanchai, Hong Kong, on our website to provide multilingual content and to enable our users to easily switch between language versions.
WPML sets functional cookies to store the selected language (preference) of a visitor. WPML does not store any user-related information.
The cookies for storing language preferences are stored for the duration of your visit or according to your browser settings and are then deleted. You can adjust or prevent the storage of cookies via your browser settings.
Further information on data processing by WPML and the OnTheGoSystems privacy policy can be found at https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/.
3.9 Personio
The first time you visit this website, it loads job offers from our recruiting tool “Personio” from Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany, into a cookie in your browser that is deleted after 24 hours. No personal data is processed in this process; the cookie simply ensures that your browser does not have to repeatedly load the same information within 24 hours. If you wish to disable this cookie feature, please disable the cookies feature for the website in your browser.
Unless otherwise agreed with our business partners, we only process personal data of theirs for the purposes of the business relationship, e.g. for communication, processing enquiries, and rendering contractual services (legal basis: fulfilment of the contract pursuant to Art. 6 para. 1 lit. b GDPR), in the context of fulfilling our legal obligations (legal basis: legal obligation pursuant to Art. 6 para. 1 lit. c GDPR), and insofar as our interests justify data processing in individual cases (legal basis: balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR, whereby our interests may be, e.g., the effective provision of our services, direct marketing or the security of our infrastructure).
The data is stored for as long as is necessary for the purposes mentioned or as long as we are legally obliged to do so, and third parties only receive data insofar as this is necessary to fulfil the contract with the respective business partner or if we are legally obliged to do so.
If you apply to us via our application portal (https://www.convista.com/karriere/#jobs), on our behalf operated by Personio SE & Co. KG Seidlstraße 3 80335 Munich, Germany) or by other means, e.g. by direct e-mail, all information provided to us is voluntary, but we naturally need meaningful information about your professional qualifications so that we can consider you for the position to be filled. We process the data provided to us during the application process for the purpose of handling this application process, which also includes passing on your data to other companies in the Convista Group if we believe that you are a better fit for a position at the respective company.
If we hire you, we will transfer your data to your personnel file. Otherwise, there are two options: Either we keep your application data for 180 days from the end of the application process (or, in the event of disputes regarding the legal conformity of the application process, for as long as necessary for clarification) in order to be able to answer follow-up questions, or – if you give us your consent – we include you in our talent pool, in which we store your data for 5 years from the end of your application process. We will be happy to delete your application documents earlier in both scenarios if you request us to do so, provided that there is no legal obligation to retain them.
The legal basis for processing your data for the usual application process is that it is necessary for carrying out the application process (Art. 6 (1) (b) GDPR), for inclusion in the talent pool it is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), for the transfer of application data to other companies in the Convista Group, our interest in effective personnel development (Art. 6 para. 1 sentence 1 lit. f GDPR).
5.1 YouTube videos
Some pages of our website have embedded videos from the YouTube platform, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These videos are embedded in what YouTube calls “privacy-enhanced mode”, which, according to YouTube, ensures that no information about visitors to our site is transferred to YouTube unless the videos are played.
As soon as you play an embedded YouTube video, a connection to the YouTube servers is established and YouTube receives the information that you have visited our website. In doing so, cookies and similar technologies may also be set, which YouTube uses to collect information about your user behavior. If you are logged in to YouTube or another Google service, Google may be able to link this information to your user account.
The legal basis for the data processing described above is your consent (Art. 6 (1) (a) GDPR), which you give by activating the videos.
Your data will also be transmitted to the USA in this process. Google is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed to ensuring an adequate level of data protection on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR). For more information, please refer to Google’s privacy policy at https://policies.google.com/privacy. You can also find information there about the storage and deletion of the collected data. You can prevent the embedding of YouTube videos and the associated data processing by disabling the playback of videos on our website.
5.2 Vimeo videos
The website also embeds videos from the Vimeo platform, a service provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. We use Vimeo to make our website more attractive. As soon as you play an embedded Vimeo video on our website, a connection to the Vimeo servers is established and Vimeo receives the information that you have visited our website. Vimeo may also use cookies and similar technologies to collect information about user behavior. If you are logged in to Vimeo, Vimeo may be able to link this information to your user account. We do not store any of the data mentioned here.
The data processing mentioned is based on your consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), which you give by activating the videos.
Vimeo is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 DSGVO) and is also committed on the basis of the standard contractual clauses (SCC) of the European Commission (Art.46 DSGVO) to ensure an adequate level of data protection. For more information, please see Vimeo’s privacy policy at https://vimeo.com/privacy.
The data collected by Vimeo is stored in accordance with their guidelines and can be influenced by the settings of your Vimeo account. You can prevent Vimeo from processing data by disabling the playback of videos or by blocking Vimeo cookies in your browser settings.
5.3 Podigee / Podcasts
The website embeds services from “Podigee”, which is provided by Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. We use this service to provide podcast content. Podigee processes technical data such as IP address, access time and browser type when playing the embedded podcast episodes in order to deliver the audio content to you and to analyze the use of the content. This data is anonymized and used exclusively for statistical purposes to ensure the functionality and security of the podcast player. With the exception of the IP address, no personal data is processed. The legal basis for the use is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), which you give by activating the podcasts.
The data is processed exclusively in Germany and only stored temporarily. Further information on data processing by Podigee can be found in Podigee’s privacy policy at https://www.podigee.com/en/about/privacy/.
You can object to the processing by Podigee at any time by deactivating the playback of the podcasts.
As a data subject, you have the right to:
- Information;
- Correction/deletion;
- Restriction of processing;
- Objection to processing;
- Data portability.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data. If you have any questions regarding the processing of your data, please feel free to email us at dpo@convista.com or contact us at the above address.