DATA PROTECTION DECLARATION

Scope of application
This data protection declaration clarifies the type, scope and purpose of the collection and use of personal data on our website https://ubj.de/en by UBJ. GmbH (hereinafter “we” or “us”). We are the responsible body for all personal data collected on the website, unless this data protection declaration contains different information.

Personal data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes the name, e-mail address or telephone number. In addition, purely technical data that can be assigned to a person is also to be regarded as personal data.

Contact details of the person responsible:
UBJ. GmbH
Haus der Wirtschaft
Kapstadtring 10
22297 Hamburg
Deutschland
Phone: +49 (0) 40 6378 5410
E‑Mail: info@ubj.de
Webseite: https://ubj.de/en
Right to information, correction, deletion and restriction of processing; Right to data portability
You have the right to receive information about the personal data that we have stored about you free of charge upon request. In addition, you have the right to correct incorrect data and the right to delete your personal data, provided that there is no legal obligation to retain or a legal basis that allows us to process the data.

You also have the right to request that we return the data you have given us (right to data portability). Upon request, we will also pass on the data to a third party of your choice. You have the right to receive the data in a common file format.

Right of objection Art. 21 GDPR
In the case of the processing of your personal data, which is carried out by us on the basis of a legitimate interest (Art. 6 Para. 1 lit. e) and lit. f) DSGVO), you have the right at any time to object to the processing of your personal data for reasons which to object arising from your particular situation (right to object Art. 21 GDPR). The data will then no longer be processed unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a data protection supervisory authority

You have the right to complain to a data protection supervisory authority at any time. A list of the German and European data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Recipients of data
In principle, we do not pass on personal data unless we expressly mention this in this data protection declaration. However, the website is operated by our service provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. In this context, Hetzner Online GmbH will also automatically process the above-mentioned personal data. This is done exclusively according to our instructions and on our behalf in accordance with an order processing contract according to Art. 28 DSGVO.

The transfer of personal data to the above-mentioned service provider takes place on the basis of Article 6 (1) (f) GDPR. This legal basis permits the processing of personal data in our "legitimate interest", provided that your fundamental rights, fundamental freedoms or interests in not processing the data do not prevail. Our legitimate interest lies in resorting to specialized service providers who can implement corresponding hosting more efficiently than we can. However, you can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against a transfer of personal data to a server service provider. An e-mail to ir@ubj.de is sufficient for this.

Overview of the procedures
Personal data is processed on this website as part of the following procedures:

1. Server log files
2. Contact
3. Additional information for applications via our website
   

1. Automatic collection of access data/server log files
We automatically collect a number of technical data, which are personal data, each time you access the website. These are:

• User's IP address
• Name of the retrieved web page or file
• Date and time of access
• amount of data transferred
• Notification of successful retrieval
• Browser type and version
• User's operating system
• the end device used by the user, including MAC address
• Referrer URL (the previously visited page)

This data will not be merged with other personal data that you actively provide on the website. We collect server log files for the purpose of administering the website and being able to recognize and ward off unauthorized access.

Legal basis
The personal data in log files are processed on the basis of Art. 6 Para. 1 lit. f GDPR. This legal basis permits the processing of personal data within the framework of the "legitimate interest" of the person responsible, provided that your fundamental rights, fundamental freedoms or interests do not prevail. Our legitimate interest lies in easier administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons that exist in your particular situation and speak against the data processing. An e-mail to ir@ubj.de is sufficient for this.

Storage duration

The server log files with the above data are automatically deleted after 14 days. We reserve the right to store the server log files longer if there are facts that suggest unauthorized access (such as an attempt at hacking or a so-called DDOS attack).

What is an IP address?
Every device (e.g. smartphone, tablet, PC) that is connected to the internet is assigned an IP address. Which IP address this is depends on the Internet access via which your end device is currently connected to the Internet. This can be the IP address assigned to you by your Internet provider, for example if you are connected to the Internet at home via your W-LAN. However, it can also be an IP address assigned to you by your mobile network provider or the IP address of a provider of a public or private W-LAN or other Internet access. In its currently most common form (IPv4), the IP address consists of four blocks of numbers. In most cases, as a private user, you will not use a constant IP address, as this is only assigned to you temporarily by your provider (so-called "dynamic IP address"). With a permanently assigned IP address (so-called "static IP address"), it is in principle easier to clearly assign the user data. Except for the purpose of tracking unauthorized access to our website, we do not use this data on a personal basis, but only evaluate on an anonymous basis which of our websites are favoured, how many times a day there are hits and the like.

Our website already supports the new IPv6 addresses. If you already have an IPv6address, you should also know the following: The IPv6 address consists of eight blocks of four. As with the entire IPv4 address, the first four blocks are typically assigned dynamically by private users. However, the last four blocks of an IPv6 address (so-called "interface identifier") are determined by the end device that you use to browse the website. Unless this is set differently in your operating system, the so-called MAC address is used for this. The MAC address is a type of serial number that is unique to every IP-enabled device worldwide. We therefore do not save the last four blocks of your IPv6 address. In general, we recommend that you activate the so-called "Privacy Extensions" on your end device in order to better anonymize the last four blocks of your IPv6 address. Most common operating systems have a "Privacy Extensions" function, which, however, in some cases is not factory-set.

2. Contact
When contacting us (e.g. via contact form or e-mail), the information provided by the user is stored for the purpose of processing the request and in the event that follow-up questions arise.

Legal basis
The information provided when contacting us is processed on the basis of Article 6 (1) (f) GDPR. This legal basis permits the processing of personal data within the framework of the "legitimate interest" of the person responsible, provided that your fundamental rights, fundamental freedoms or interests do not prevail. Our legitimate interest lies in processing the contact. You can object to this data processing at any time if there are reasons that exist in your particular situation and speak against the data processing. An e-mail to ir@ubj.de is sufficient for this.

Duration of data storage
The personal data stored in connection with the establishment of contact will be deleted when the issue associated with the establishment of contact has been completely clarified and it is not to be expected that the specific establishment of contact will be relevant again in the future.

3. Additional information for applications via our website
We collect and process the personal data of applicants for the purpose of handling the application process. The processing can also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by email (jobs@ubj.de).

We then use and store the transmitted personal data to carry out the application process (e.g. job interview etc.). If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

Personal data is usually collected directly from you as part of the application process - on the occasion of your application for a specific job advertisement or your unsolicited application. In addition, we may also have received data from third parties if you have applied to us via a corresponding platform (e.g. job portal). We can also process personal data that we have legitimately received from publicly accessible sources (e.g. professional social networks).

In order to accept and evaluate your application and depending on the data you have provided, we may process personal data such as those set out below:

• Surname
• Contact details
• E-mail address
• Telephone number
• Date and place of birth
• Application photo
• Files and documents such as references and certificates that you send us in connection with your application.

The data that you transmit to us in the application process will not be passed on to

third parties.

Legal basis
The processing of the data that you have provided to us as part of the application process takes place on the basis of Article 6 Paragraph 1 Clause 1 Letter b, Article 88 GDPR in conjunction with Section 26 Paragraph 1 BDSG. In the case of your consent, the legal basis is Article 6 Paragraph 1 Clause 1 Letter a GDPR. You can revoke your consent at any time with effect for the future. An e-mail to ir@ubj.de is sufficient for this.

Duration of data storage
Your personal data will be deleted no later than six months after the end of the application process. Something else only applies if you have given us your express consent to store your data in our applicant pool for a possible later job offer and thus later consideration. If you are hired, we will include the data provided in our personnel file.

Status March 2023