5. Retention Period

The retention period for your personal data corresponds to the various statutory retention periods. Once the statutory retention periods have expired, we will delete your data unless we agree on a different retention period with you for practical reasons. If there is no statutory retention period, we will delete your data 24 months after processing your request. We delete job application documents no later than 6 months after receipt.

6. Information Services from Other Providers

a) LinkedIn

Our website uses features from the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Every time you access one of our pages that contains LinkedIn features, a connection is established with LinkedIn’s servers. LinkedIn is notified that you have visited our website. LinkedIn collects, among other things, your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the LinkedIn pages, with statistical information about the use of the LinkedIn page. According to LinkedIn, your IP address is anonymized (for “German” IP addresses) and deleted after 90 days. The data collected about you is processed by LinkedIn Inc. and may be transferred to countries outside the European Union. LinkedIn describes in general terms what information it receives and how it is used in its Data Use Policy. There you will also find information on how to contact LinkedIn and on advertising preferences. The Data Use Policy is available at the following link:
https://www.linkedin.com/legal/privacy-policy.

If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn can associate your visit to our website with you and your user account. If you wish to prevent this, you should log out of LinkedIn or disable the “Stay logged in” feature, delete the cookies stored on your device, and close and restart your browser. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. LinkedIn does not clearly and conclusively specify how it uses data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are attributed to individual users, or whether data from a visit to the LinkedIn page is shared with third parties; we are not aware of this information.

Please note that you use this LinkedIn page and its features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating).

As the provider of this information service, we do not collect or process any additional data resulting from your use of our service.

b) YouTube

This website uses YouTube to display and play videos. YouTube is owned by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection is established to YouTube’s servers. In the process, the YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing activity directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how user data is handled, please see YouTube’s Privacy Policy at: www.google.de/intl/de/policies/privacy

c) Facebook

BlueSens gas sensor GmbH uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to provide the information service offered here.

Please note that you use this Facebook page and its features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating). Alternatively, you can also access the information offered on this page via our website at www.bluesens.com.

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operators of the Facebook pages, with statistical data regarding the use of the Facebook page. Facebook provides further information on this at the following link: http://de-de.facebook.com/help/pages/insights

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its Privacy Policy. There you will also find information on how to contact Facebook and on the options for managing ads. The Data Use Policy is available at the following link: http://de-de.facebook.com/about/privacy

Facebook’s complete data policies can be found here: https://de-de.facebook.com/full_data_use_policy

Facebook does not clearly and conclusively specify how it uses data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are attributed to individual users, how long Facebook stores this data, or whether data from a visit to the Facebook page is shared with third parties; we are not aware of this information.
When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about its users’ devices (e.g., as part of the “Login Notification” feature); in some cases, this may allow Facebook to associate IP addresses with individual users.

If you, as a user, are currently logged into Facebook, there is a cookie on your device containing your Facebook ID. This enables Facebook to track that you have visited this page and how you used it. This also applies to all other Facebook pages. Through Facebook buttons embedded in websites, Facebook can track your visits to these websites and associate them with your Facebook profile. Based on this data, content or advertising can be tailored to you.

If you wish to avoid this, you should log out of Facebook or disable the “Stay Logged In” feature, delete the cookies stored on your device, and close and restart your browser. This will delete Facebook information that can be used to directly identify you. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive features on the page (Like, Comment, Share, Messages, etc.), a Facebook login screen will appear. After logging in, Facebook will once again be able to identify you as a specific user.
For information on how to manage or delete information Facebook has about you, please visit the following Facebook Support pages: https://de-de.facebook.com/about/privacy#

As the provider of this information service, we do not collect or process any other data resulting from your use of our service.

d) Instagram

Privacy Notice for the BlueSens gas sensor GmbH Instagram Profile
– Information pursuant to Articles 13, 14, and 21 of the General Data Protection Regulation (“GDPR”)

aa) What is this about?

BlueSens gas sensor GmbH (hereinafter referred to as “BlueSens”) operates an “Instagram profile” to promote its services and service offerings and to interact with its customers and visitors to the Instagram profile (“Users”).
When you use the BlueSens Instagram profile, personal data is processed. The following information explains the nature and scope of the data processing for which BlueSens is responsible under data protection law in this context.

bb) Who is responsible for data processing on BlueSens’ Instagram profile, and who can I contact?

The BlueSens Instagram profile is accessible via the Instagram platform (www.instagram.com), which is operated in the European Union by: Facebook Ireland Limited (“Facebook”)
Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

For some of the data processing activities on BlueSens’ Instagram profile, BlueSens itself is the data controller:

BlueSens gas sensor GmbH
Snirgelskamp 25
45699 Herten
Phone: +49 2366 / 4995 500
Fax: +49 2366 / 4995 599
Mail: info(at)bluesens.de

You can contact our Data Protection Officer at:
Attorney Ulf Lappe
Schorlemerstraße 11
48143 Münster
lappe@bergmann-lappe.de

cc). For what purposes is your data processed when you visit BlueSens’s Instagram profile, and on what legal basis?
 (1) Independent processing of usage data by Facebook

When you visit BlueSens’s Instagram profile or other profiles on the Instagram platform, Facebook collects usage data.
In doing so, Facebook also uses certain data it has collected from users of the Instagram platform (e.g., whether a photo on an Instagram profile has been “liked” or commented on) to compile aggregated usage statistics and make them available to the respective operators of the Instagram profile (so-called “Instagram Insights”). BlueSens also receives such Instagram Insights. The information that BlueSens receives through Instagram Insights does not allow for the identification of individual users. BlueSens itself has no access to the personal data that Facebook processes for Instagram Insights. Facebook alone determines which data is processed for Instagram Insights and how it is processed. BlueSens has no legal or practical influence over Facebook’s processing activities.
Facebook is solely responsible for this data processing. Facebook provides information on this in the Instagram Privacy Policy and the Instagram Cookie Policy.

(2) Processing of Your Data When Communicating with BlueSens via the Instagram Profile

If you contact BlueSens via the Instagram profile—for example, by commenting on a post or sending BlueSens a message via Instagram Direct Messenger—BlueSens processes your data (e.g., your name and the content of your communication) to address your inquiry.
To the extent necessary, BlueSens also processes your data to assert legal claims and defend against legal disputes, as well as to prevent and investigate criminal offenses.
This processing is based on a balancing of interests pursuant to Article 6(1), first sentence, letter f of the GDPR, which always takes your interests into account as well.

dd). How long will my data be stored?

BlueSens does not store any personal data regarding your use of the Instagram profile. Information that you post on BlueSens’s Instagram profile (e.g., comments) or send via Instagram Direct Messenger is stored by Facebook based on your user relationship and can be deleted by you directly on Instagram.

ee). Who receives my data?

When BlueSens communicates with you via its Instagram page, it transfers the personal data necessary for this purpose to Facebook.
Otherwise, BlueSens will only disclose your personal data to third parties if you have consented to it, if there is a legal basis for doing so, or if it is necessary to enforce BlueSens’s rights, in particular to assert or defend claims.

ff). Is your data transferred to a third country or to an international organization?

BlueSens does not transfer personal data collected via its Instagram profile to third countries (i.e., countries outside the European Union and the European Economic Area).

e) Microsoft Bookings and Microsoft “Teams”

aa) Categories of Data, Purposes, and Legal Bases for Processing

We use Microsoft Bookings for scheduling appointments. The legal basis for this is Article 6(1)(b) of the GDPR (scheduling an appointment as a pre-contractual measure). In connection with the booking, we generally store your name and contact information. However, Microsoft may store metadata such as your IP address.
We use the “Microsoft Teams” tool to conduct conference calls, online meetings, video conferences, and/or webinars (hereinafter: “online meetings”). “Microsoft Teams” is a service provided by Microsoft Corporation.
The following personal data is subject to processing:

• IP address
• User information: e.g., display name, email address (if applicable), profile picture (optional), preferred language
• Meeting metadata: e.g., date, time, meeting ID, phone numbers, location
• Text, audio, and video data: You may have the option to use the chat feature during an “online meeting.” In this regard, the text you enter is processed in order to display it during the “online meeting.” To enable video display and audio playback, data from your device’s microphone and, if applicable, its video camera will be processed for the duration of the meeting. You can disable or mute the camera or microphone yourself at any time via the “Microsoft Teams” application.

The legal basis for data processing when conducting “online meetings” is Article 6(1)(b) of the GDPR, insofar as the meetings are conducted within the framework of contractual relationships.

To the extent that the processing of personal data is an integral part of using “Microsoft Teams,” Article 6(1)(f) of the GDPR serves as the legal basis for data processing. In such cases, our interest lies in the effective conduct of “online meetings.”

If no contractual relationship exists, the legal basis is Article 6(1)(f) of the GDPR. Our interest here is in the effective conduct of “online meetings.”

bb) Who receives my data?

Microsoft Bookings is software provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”), which is available as a web application. When you access the web application, Microsoft may collect metadata such as your IP address.

When using “Microsoft Teams,” becomes Microsoft necessarily aware of the aforementioned data, to the extent provided for in our data processing agreement with “Microsoft Teams.”

cc) Is your data transferred to a third country or to an international organization?

Data processing by Microsoft generally takes place in a European data center. In the event that data is nevertheless processed in the United States, the EU Standard Contractual Clauses apply between Microsoft and us. These ensure a level of data protection in accordance with the GDPR when data is transferred to the United States.
For more information, please see Microsoft’s Privacy Statement, available at: https://privacy.microsoft.com/de-de/privacystatement

7. Your Rights

Every data subject has the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, and the right to data portability under Article 20 of the GDPR. With regard to the right of access and the right to erasure, the restrictions set forth in Sections 34 and 35 of the Federal Data Protection Act (BDSG) apply.
In addition, there is a right to lodge a complaint with the competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the BDSG):
The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
E-mail: poststelle(at)ldi.nrw.de

Requests for information and data subject rights regarding the processing of usage data on BlueSens’ Instagram profile can be submitted to Facebook via the Facebook data form. Only Facebook has access to user data and can therefore take direct action and provide information.