Privacy Policy
In this privacy policy, we inform you about the scope of processing of your personal data (hereinafter referred to only as “Data”) by WP Media SAS .
The controller for the processing of personal data in the context of this website (B.) and our general business operation (C.) according to the provisions of the General Data Protection Regulation (GDPR) is:
WP Media SAS – 4 rue de la République, 69001 Lyon, France
Website: https://wp-media.me
Email: backwpup@wp-media.me
A.) General information concerning data processing
We process data in the context of running our website and our general business operations. This data processing also includes disclosure in the form of transmission.
A detailed description of the data, purposes of processing, legal bases, recipients and transfer to third States is provided in the following list.
B.) Data processing for our website
I.) Log file
We record your visit to our website. In this context, the following data is processed: Name of each website visited, date and time of visit, quantity of data transferred, browser type and version, the operating system you use, the referrer URL (previously visited website), your IP address and the requesting provider. This is necessary in order to guarantee the security of the website. We process the data accordingly based on our legitimate interests pursuant to Art. 6 (1)(f) GDPR. The log file will be deleted after seven days unless it is required to resolve or demonstrate specific legal violations that have become known during the retention period.
II.) Hosting
Hosting involves the storage of all data processed in connection with the operation of this website. This is necessary in order to enable operation of the website. We process the data accordingly based on our legitimate interests pursuant to Art. 6 (1)(f) GDPR. To provide our website, we use the services of web hosting providers to whom we transfer the data outlined above.
III.) Establishing contact
If you establish contact with us, we will exclusively process your data (name, contact details if you provide them) and your message (including date and time) for the purpose of processing and handling your enquiry. We process this data on the basis of Art. 6 (1)(b) GDPR or Art. 6 (1)(f) GDPR to handle your enquiry.
V.) Job applications
If you establish contact with us in order to submit your job application via email or using our application form, we will process your data (e.g. name, email address, desired place of employment if you provide these), your message and the application documents you submit exclusively for the purpose of processing and handling your job application. The legal basis for data processing is primarily Section 26 BDSG. According to this provision, data processing is permitted if it is necessary in the context of deciding whether to establish an
employment relationship.
If the data is required after the end of the application process for the purposes of prosecution, data processing may occur to pursue our legitimate interests pursuant to Art. 6 (1)(f) GDPR, namely the exercise or defence of legal claims.
VI.) Website analysis and marketing
To enable the use of certain features, we use so-called cookies. These are short data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are erased directly after you close your browser (so-called session cookies). Other cookies remain on your device and make it possible to recognise your browser the next time you visit (persistent cookies). Data processing on the basis of cookies solely to establish the functionality of our website is carried out on the basis of our legitimate interests pursuant to Art. 6 (1)(f) GDPR.
You can delete all cookies stored on your device and change the settings for common browsers to prevent the storage of cookies.
In this case, you may have to change certain settings again each time you visit the website and accept the restriction of some features.
We use cookies in connection with the following features:
1.) Google Analytics
We use Google Analytics, a service of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 USA. Google uses certain cookies for this service. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. We use the stored information to analyse your use of the website, to compile reports about website activity for the website operator and to perform other services associated with website use. We process the data obtained in this way based on our overriding interest in optimal marketing for our website pursuant to Art. 6 (1)(f) GDPR. Google will not link your IP address with other data held by Google under any circumstances.
We hereby note that this website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses will be truncated before their transfer to a server in the USA. Direct personal identification is not generally possible using the stored data. Only in exceptional cases, the full IP address will be transferred to a server in the USA and truncated there.
You may object to the collection of data at any time with future effect by using the deactivation browser add-on for Google Analytics at http://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent collection by Google Universal Analytics by clicking the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website.
Please also note the policies for the use of Google data in the Google partner network at:
https://support.google.com/adspolicy/answer/6020956?hl=en
Google is certified under:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
You can find more information about data protection at: https://policies.google.com/privacy?hl=de&gl=de
VII.) Embedding external content
We use external dynamic content to optimise the display and services on our website. When visiting the website, a query is automatically relayed to the server of the relevant content provider via API to transmit certain log data (e.g. the user’s IP address). The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following features:
Embedding Vimeo videos
On our website, we have embedded videos from the portal Vimeo of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. When playing the videos, log data is transmitted to the servers of Vimeo in the USA. This processing
occurs on the basis of our overriding legitimate interest in the optimal marketing of our services pursuant to Art. 6 (1)(f) GDPR.
You can find more information at: https://vimeo.com/privacy
C.) Data processing for our general business operation
I.) Processing of data concerning our suppliers and providers
1.) Procurement and purchasing
During the procurement and purchasing of products and services for our company, we process the following data of our suppliers and providers: Contact details for the contact person, company, name, address, phone number, fax number, e-mail address, IBAN, tax number, creditor number.
Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.
In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
2.) Provider support
When placing orders with external providers or collaborating with external providers, we process the following data of the provider or its employees: Contact details for the provider’s contact person, contact details for the provider’s employees, company, name, address, phone number, fax number, e-mail addresses, IBAN, tax number and scope of services ordered.
Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.
In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
II.) Data processing concerning interested parties and employees
1.) Applicant management
In association with our applicant management, we process the following data concerning applicants: Name, address, date of birth, phone number, e-mail address, religious affiliation, photo if relevant, marital status, number of children, professional qualifications, schooling and school certificates and job references.
We process your data exclusively for the purposes of processing and handling your application. The legal basis for data processing is primarily Section 26 BDSG. According to this provision, data processing is permitted if it is necessary in the context of deciding whether to establish an employment relationship.
If your application is successful, your data will be transferred to your personnel file.
We will retain the data of unsuccessful applicants for a period of no more than six months after the end of the application process and then delete it.
The reason for data processing after the conclusion of the application
process is the need for comprehensive documentation of the application process for the exercise and/or defence of labour law claims by former applicants. The legal basis for this data processing is our overriding legitimate interest in full legal defence pursuant to Art. 6 (1)(f) GDPR.
If you expressly consent to be included in our applicant pool during the application process, data processing will occur after the outlined period. This data processing occurs on the basis of your consent pursuant to Art. 6 (1)(a) GDPR. The data will be deleted after 12 months at the latest.
2.) Employee data
During the course of employment and to establish the employment relationship, we process the following data concerning you:
- Master data: Name, address, gender, date of birth, place of birth, phone number, e-mail address, photo were relevant, personnel number;
- Marital status, children, religious affiliation, nationality;
- Contract data: Start/end of employment, type of position, level of employment
- Organisation data: Job description, supervisor, location
- Business contact data and communication data
- Profile data: professional qualifications and schooling, school certificates and job references, other qualifications, work permit
- Wage and wage payment data: Salary, variable wage components, bonuses, tax class, tax ID, health insurance, bank details, social security number, wage garnishment, supporting documents relevant for remuneration, private retirement provisions,
- Working hours, absence periods and reasons for absence (holiday, illness etc.), releases;
- Access rights to IT systems and data processing operations, log data concerning use of communications and data processing systems, photos for the company website, video recordings of training videos and joint meetings
- Where relevant, data about health and integration management: severe disability status, occupational health examinations
- Organisation data and administrative data about your position in the company and job as well as log data collected and processed about the operation and use of data processing facilities and data processing methods.
- T-shirt and shoe size
In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
The legal basis for data processing in connection with your employment relationship is Art. 88 GDPR in conjunction with Section 26 BDSG.
Insofar as data is collected that
is not directly required for the performance of the employment relationship, this data processing occurs based on our overriding legitimate interest in a properly functional organisational and administrative structure pursuant to Art. 6 (1)(f) GDPR.
III.) Data processing concerning customers and partners
1.) Agency services
Our services include customer advisory, workshops, training, website, interface and web shop creation, migration, security and auditing as well as maintenance by our agency.
As part of these services, we process the following data concerning our customers and their external providers where necessary for the purpose of customer acquisition, order execution and customer support: Company, address, phone number, fax number, e-mail address, first name and last name of employees and their business contact details, data about the services rendered, data about order execution, customer feedback, payment data and content data for payment specification.
In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.
2.) Product sales
We offer the following services to our customers: Shop support, product marketing, sale of products including pre-sales, sales, support and return handling.
During order execution and subsequent support, we process the following data concerning our customers: Company, address, IP address, e-mail address, data concerning the product purchased, first name and last name of employees and their business contact details, support data, customer feedback, payment data and content data for payment specification.
In the context of payment handling and tax claims, we transfer the data required in the individual case to the payment provider engaged with settlement, our accounting service and our tax advisor.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.
3.) Product support
We offer various support services. These services cover products that our customers purchased in our shop, products that we manage in collaboration with other companies and free products that we provide for marketing purposes.
When providing our support services, we process the following data concerning our customers: Name, email address and other contact details provided by the user, information about the product, payment data and content data for payment specification where relevant, access data provided for the user’s website, personal data from the user’s shop that can be accessed in this manner where relevant, log files of visitors to the customer’s website.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data
outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
This data processing occurs on the basis of your consent pursuant to Art. 6 (1)(a) GDPR.
4.) Product creation and maintenance
We create and maintain proprietary products in partnerships with external providers, or contribute to the ongoing development of such products or offer technical support.
To perform these services, we process the data of our partners, and when providing support we may also process the data of our partners’ customers. We process the following data concerning our partners: Company, last name, first name, address, IP address, e-mail address, data concerning the product, feedback, payment data and content data for payment specification.
When providing support, we process the following data concerning our partners’ customers: E-mail address, name, contact details, access data provided by the customer for the customer’s website and personal data from the customer’s website that can be accessed in this manner where relevant.
In connection with our internal company processes, we use various programs and providers to whom we transfer the data outlined above.
If data is transferred to the USA in this context, preservation of an appropriate level of data protection is guaranteed.
Data processing occurs to perform the contract on the basis of Art. 6 (1)(b) GDPR.
D.) Duration of data storage
We only store personal data as long as this is required for the purposes of processing or until you withdraw your consent. If statutory retention obligations must be observed, the storage period before erasing certain data may be up to 12 years regardless of the purpose of processing, depending on the date of the relevant tax assessment. (counting from the end of the relevant procedure in each case)
E.) Your rights as a data subject
I.) Access to information
On request, you can obtain access to information concerning all personal data we have stored concerning you at any time.
II.) Rectification, erasure, restriction of processing (blocking), objection
If you no longer agree with the storage of your personal data or if this data has become inaccurate, we will act according to your instructions to erase or block your data or undertake the necessary corrections (insofar as this is possible according to the applicable law). The same applies for restrictions to our future processing of data.
III.) Data portability
On request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can transmit the data to another controller if you wish.
IV.) Right to lodge a complaint
You have the right to lodge a complaint with the responsible supervisory authority: (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).
V.) Right to withdraw consent with future effect
After granting consent, you can withdraw your consent at any time with future effect. Withdrawing your consent does not affect the legality of processing carried out before it is withdrawn.
VI.) Restrictions
Data which does not allow us to personally
identify the data subject, for instance data that is anonymised for analytical purposes, are not covered by the rights listed above. Access to information, erasure, blocking, rectification or transfer to another company are possible for this data if you provide us with additional information that enable us to carry out identification.
VII.) Exercising your rights as a data subject
For questions concerning the processing of your personal data, for access to information, rectification, blocking, objection or erasure of data or to request transfer of data to a different company, please contact backwpup@wp-media.me.
