Privacy

1. PRIVACY AT A GLANCE

General information
The following notes provide a simple overview of what happens to your personal information when you visit our website. Personal information is any information that personally identifies you. You can find detailed information on the subject of data protection in our data protection declaration listed below this text.

Information according to Art. 13/14 Data Protection Basic Regulation (DSGVO)
Beyond the website we process personal data also in principle in the context of our business relation. Information on these data processing operations and your data protection claims and rights, some of which also relate to data processing on our website, can be found in our data protection information pursuant to Articles 13 and 14 of the Basic Data Protection Regulation.

How do we collect your data?
On the one hand, your data is collected by you communicating it to us. This may, for example, involve data that you enter in a contact form. Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Part of the data is collected to ensure that the website is error-free. Other data can be used to analyse your user behaviour.

What rights do you have with regard to your data?
You have the right at any time and free of charge to obtain information about the origin, recipient and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked or deleted. You can contact us at any time at the address given in the imprint for this as well as for further questions on the subject of data protection. Furthermore, you have the right to appeal to the responsible supervisory authority.

2. General information and mandatory information

Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations as well as this data protection explanation. If you use this website, various personal data will be collected.

Personal data is data with which you can be personally identified. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can be subject to security gaps. A complete protection of the data against access by third parties is not possible.

Reference to the responsible office
The responsible entity for data processing on this website is:

Hans-Georg Scheibe, Michael Jung
ROI Management Consulting AG
Infanteriestraße 11
D-80797 Munich, Germany

Phone: +49 89 1215 90-0 E-Mail: kontakt(at)roi.de

Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Withdraw of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the responsible supervisory authority
In the event of breaches of data protection law, the data subject shall have the right to lodge a complaint with the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

SSL- or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this and other questions on the subject of personal data.

3. Data protection commissioner

Statutory data protection officer
We have appointed a data protection officer for our company.

Richard Söldner
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg

Phone: 09 41 – 29 86 93-0
E-mail: info@projekt29.de

4. Data collection on our website

Cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a justified interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this data protection declaration.

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• user operating system
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data will not be merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a justified interest in the technically error-free presentation and optimisation of his website – for this purpose, the server log files must be recorded.

Contact form
If you send us enquiries via the contact form, your details from the enquiry form including the contact data you provided there will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. These data will not be passed on without your consent.

We have integrated the contact form on the homepage.

The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Data protection information in the application process
We process the applicant data only for the purpose and within the framework of the application procedure in accordance with the legal requirements. The processing of the applicant data is carried out to fulfil our (pre)contractual obligations within the scope of the application procedure in the sense of Art. 6 Para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as data processing becomes necessary for us, e.g. within the framework of legal proceedings (in Germany, § 26 BDSG additionally applies).

The application procedure requires that applicants provide us with the applicant data. If we offer an online form, the necessary applicant data is marked, otherwise it results from the job descriptions and basically includes the personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, curriculum vitae and certificates. In addition, applicants may voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application procedure in accordance with the type and scope set out in this data protection declaration.

If special categories of personal data within the meaning of Art. 9 Para. 1 DSGVO are voluntarily provided as part of the application process, they will also be processed in accordance with Art. 9 Para. 2 lit. b DSGVO (e.g. health data, such as severely disabled status or ethnic origin).

As far as special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants in the context of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. a GDPR (for example health data, if necessary for the profession).

If provided, applicants can submit their applications via our online form on our website. The data will be encrypted and transmitted to us according to the state of the art. Furthermore, applicants can send us their applications via e-mail. However, please note that e-mails are generally not sent encrypted and that applicants themselves must provide encryption. We can therefore take no responsibility for the transmission of the application between the sender and the reception on our server and therefore recommend rather to use an online form or the postal delivery.

The data provided by the applicants may be further processed by us in the event of a successful application for employment purposes. Otherwise, if the application for a job offer is not successful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn and a written request for cancellation is made, to which the candidates are entitled at any time. The deletion takes place, subject to a justified cancellation of the applicants, after the expiration of 180 days or other valid legal deadlines. The storage of the applicant data takes place, so that we can answer any follow-up questions to the application and meet our proof obligations under the Equal Treatment Act.

Processing data (customer and contract data)
We only transfer personal data to third parties if this is necessary in the course of the contract, for example to the bank responsible for the processing of payments.

A further transmission of the data does not take place or only if you have expressly consented to the transmission. A transfer of your data to third parties without explicit consent, such as for advertising purposes, does not occur.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which allows the processing of data for the performance of a contract or precontractual measures.

5. Social media

Share content via plugins (Facebook, Google+1, Twitter & Co.)
The content on our pages can be shared on social networks such as Facebook, Linkedin, Xing, Twitter or Google+ in compliance with data protection regulations. This site uses the social media “Share” buttons via the integrated Heise tool “Shariff”. This tool establishes direct contact between networks and users only when the user actively clicks on one of these buttons. This tool does not automatically transfer user data to the operators of these platforms. If the user is registered with one of the social networks, an information window appears when using the social buttons of Facebook, Goog- le+1, Twitter & Co. in which the user can confirm the text before sending it.

Our users can share the contents of this page in social networks in compliance with data protection regulations, without complete surfing profiles being created by the network operators.

Further information on the Shariff solution can be found on the website of Heise Medien Gmbh & Co. KG under m.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

Links to our company profiles
By clicking on the social media icons in the sidebar of our ROI website, in the footer and/or on our contact pages of our ROI website, you can access our company profiles on Xing, LinkedIn, Youtube or Google+. For this a new browser window opens or if you access it with your Smartphone or Tablet the respective app of the provider (if you have installed it on your device). With one click you leave our website just like via any other external link. Further information than the requested target page will not be actively forwarded by us. Please note, however, that we cannot provide reliable information about how and to what extent personal data is automatically requested and used on external pages or via external applications. If you have any doubts or concerns, please do not click on the link. Current information can be found in the data protection regulations of the respective providers.

6. Use of personal images

The photographs taken by me may be used free of charge by ROI in the closed member area of the event or on the ROI website.

I waive the right to my own picture (according to § 22 KunstUrhG) with regard to the above object and do not demand any remuneration for the above use. I do not derive any rights (e.g. remuneration) from the consent to publication. I also agree to the processing of the photograph, as long as it is not distorting. This declaration of consent can be revoked by the initiator at any time with effect for the future. In the event of revocation, the recordings will be removed from the respective platform. If the recordings were available on the Internet, they will be removed insofar as they are subject to the availability of the initiator. I am aware that further distribution of recordings on the Internet by third parties cannot be excluded. In the case of printed works, consent can no longer be revoked as soon as the print order has been placed.

7. Analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.
Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

Use of the SalesViewer® technology:
This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimisation purposes on the basis of the website operator’s legitimate interests (Art. 6 Para. 1 lit. f DSGVO).

A javascript-based code is used for this purpose, which serves to collect company-related data and the corresponding use. The data collected with this technology is encrypted using a non-reversible one-way function (so-called hashing). The data is immediately pseudonymised and is not used to personally identify the visitor to this website.

The data collection and storage can be contradicted at any time with effect for the future, by clicking please this link https://www.salesviewer.com/opt-out, in order to prevent the collection by SalesViewer® within this web page in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.

IP Anonymization
We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

Browser Plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to this website:

Disable Google Analytics
For more information on how Google Analytics uses user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract of data processing by Google
We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics of Google Analytics
This website uses the function “demographic features” of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. This information cannot be associated with any specific individual. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit Google Analytics from collecting your data as described under “Objection to data collection”.

Google Analytics Remarketing
Our sites use Google Analytics Remarketing features in conjunction with the cross-device features of Google AdWords and Google DoubleClick. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This feature allows you to link the promotional audiences created with Google Analytics Remarketing to the cross-device features of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages adapted to you based on your past usage and browsing behavior on one end device (e.g., cell phone) may also be displayed on another of your end devices (e.g., tablet or PC).

Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, the same personalized advertising messages can appear on any device you sign in to with your Google Account.

To support this feature, Google Analytics collects Google-authenticated IDs of the users that are temporarily associated with our Google Analytics data to define and create audiences for cross-device ad promotion.

You can permanently opt out of cross-device remarketing / targeting by disabling personalized ads in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google Account is based solely on your consent, which you can give or withdraw from Google (Article 6 (1) (a) GDPR). For data collection operations that are not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) lit. f DSGVO. The legitimate interest results from the fact that the website operator has an interest in the anonymous analysis of the website visitors for advertising purposes.

For more information and privacy policy, see the Google Privacy Policy at https://www.google.com/policies/technologies/ads/.

Google reCAPTCHA
We use “Google reCAPTCHA” (hereafter “reCAPTCHA”) on our websites. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).

With reCAPTCHA we want to check if the data entry on our websites (for example in a contact form) is done by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (for example, the IP address, website visitor’s time spent on the website, or user mouse movements). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyzes are completely in the background. Site visitors are not advised that an analysis is taking place.

Data processing is based on Art. 6 para. 1 lit. f DSGVO. The Web site operator has a legitimate interest in protecting its web sites from abusive automated spying and SPAM.

For more information about Google reCAPTCHA and the Google Privacy Policy, please visit the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

8. Plugins and tools

YouTube
Our website shows videos that have been integrated using the embed function of the YouTube page operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plug-in, a connection is established to YouTube’s servers. This will tell the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you can allow YouTube to directly associate your surfing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

Further information on the handling of user data can be found in YouTube’s data protection declaration at: https://www.google.de/intl/en/policies/privacy.

External links
By clicking on external links you leave our website or a new session opens in your browser (new tab or new browser window). Further information than the requested target page will not be actively forwarded by us or this is noted elsewhere. Please note, however, that we cannot provide reliable information about how and to what extent personal data is automatically requested and used on external pages or via external applications. If you have any doubts or concerns, please do not click on the link. Current information can be found in the data protection regulations of the respective providers.