Privacy policy of LEG Thüringen

You can generally use our online offer without disclosing your identity. If we request personal data (such as name, address or e-mail address) on the website, e.g. in the context of contact forms or during registration, this is done on a voluntary basis. We use this information for our own business purposes (such as sending the requested materials/information)."

For questions of any kind, we offer you the possibility of contacting us via a form provided on the website. The data marked as mandatory are required in order to be able to allocate and answer the enquiry. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be deleted after the enquiry you have made has been dealt with and after expiry of the obligations to keep records under tax and commercial law.

Cookies

This site uses "cookies". Cookies are text files that are stored on your computer and enable an analysis of the use of the website and automatically recognise you on your next visit. You can prevent the installation of cookies by setting your browser accordingly. This may mean that you cannot make full use of all offers.

Logging

Whenever the website is accessed, logs are created and processed for statistical purposes, whereby the individual user remains anonymous:

• Referrer (page from whose link you reached this website)
• Search terms (used by search engines as referrer)
• IP is analysed to determine the country of origin and the provider
• Browser, operating system, installed plug-ins and screen resolution
• Time spent on the pages

The aforementioned data is processed by us on the basis of our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f DSGVO for the following purposes:

• Ensuring a smooth connection of the Internet presence,
• Ensuring a comfortable use of our Internet presence,
• evaluation of system security and stability as well as
• for further administrative purposes.

We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use. The data will be deleted immediately if it is no longer required to achieve the purpose, but at the latest after six months.

Protected area on the website

You can register for various services within the framework of a protected area on our website by means of a personal identification. Logs are created and processed for statistical purposes each time you log in. More details can be found in the above explanations on logging.

Disclosure and service providers

As a matter of principle, we do not pass on your personal data to third parties, for commercial or non-commercial purposes, without your express consent. We only pass on your personal data to third parties if this is legally permissible [e.g. on the basis of Article 6 DSGVO] and/or necessary. In some cases, we use service providers for the legally required commissioned processing of data; for example, the website is hosted by Hetzner Online GmbH. The full responsibility for data processing remains with us. Furthermore, we partly use plugins from other providers on our website; you can find more details below.

Liability for own contents

The contents of these pages were created with the utmost care. However, we cannot guarantee the correctness, completeness and up-to-dateness of the contents. As a service provider, we are responsible for our own content on these pages in accordance with general laws.

Liability for links (contents of external providers)

A distinction must be made between our own content and cross-references ("links") to content provided by other providers. We have no influence on their content; the respective provider or operator of the pages is always responsible for the content of the linked pages.

Your rights

See below

Contact the Data Protection Officer

See below

You have the option of ordering a newsletter at various points. We process your personal data exclusively in connection with the order and receipt of our newsletter in order to send you information about products, services, events and other interesting facts about our company. You can object to this sending at any time with effect for the future.

For statistical purposes, we track which links within the newsletter are clicked and lead to actions on our website ("conversion"). However, this data is not assigned to you; rather, it is anonymous.

The data you provide is required to send the newsletter. Without this data, we cannot consider your registration for the newsletter.

External service providers

In the context of sending the newsletter, we use a service provider (Newsletter2Go), which accesses your data in the context of commissioned data processing in accordance with § 28 DSGVO. The service provider acts in accordance with instructions, which has been ensured by corresponding contracts.

Retention and deletion

The data will be kept until you unsubscribe from the newsletter.

Your rights

See below

Contact the Data Protection Officer

See below

As a contractual partner of your company, we process the personal data with regard to your person for the preparation of offers, fulfilment of contracts, accounting and cost accounting on the basis of Art. 6 (1) sentence 1 lit. b DSGVO as well as for the fulfilment of contractual and legal obligations (for example commercial and tax law) on the basis of Art. 6 (1) sentence 1 lit. c DSGVO. The business relationship is between us and your company. In the course of external requirements (for example in the context of customs/tax law), it may happen that personal data about you is compared with lists published by authorities.

The data you provide is necessary for the performance of the contractual relationship. Without this data, we cannot fulfil the contract concluded with your company.

Furthermore, data may also be processed for legitimate purposes in accordance with Art. 6 para. 1 p. 1 lit. e and f DSGVO, such as marketing of the Thuringia location, internal market research and marketing purposes, internal company statistics. In some cases, company data (including personal data) obtained from publicly accessible sources - such as the commercial register - is used for this purpose. The legitimate interests lie in particular in the optimisation of processes, the public interest of the Free State of Thuringia and the cost-justified allocation; your interests, fundamental rights and freedoms are duly taken into account.

Provided you have given us your consent to do so or we have informed you appropriately within the scope of data collection pursuant to Section 7 of the German Unfair Competition Act (UWG), we will use your data to send you information electronically about services, events and other things worth knowing about our institution. You can also receive relevant information from us by post. You can object to this sending at any time with effect for the future.

Disclosure and service providers

Some of your personal data will be passed on to external service providers (for example billing companies, mailing service providers, tax advisors, legal advisors). In some cases, external IT service providers may access your data (as part of commissioned data processing pursuant to Article 28 DSGVO). In this case, the service providers act in accordance with instructions, which has been ensured by corresponding contracts. In order to be able to offer you optimum information and services in accordance with the above-mentioned purposes, information (including personal data) is transferred to other companies within the LEG Thüringen Group in compliance with the above-mentioned legal basis.

We would like to point out that we may also pass on your personal data to other companies within our group for the above-mentioned purposes [see "About us"]. The data transfer takes place on the basis of a legitimate interest in order to be able to offer you a comprehensive range of our services.

Retention and deletion of data

Your data will be stored for as long as is necessary for the above-mentioned purposes. The data will be deleted at the latest after termination of the contractual relationship and after expiry of the statutory retention periods under civil, commercial and tax law.

Your rights

See below

Contact the Data Protection Officer

See below

We process personal data with regard to your person in connection with the establishment, implementation and execution of the concluded purchase or rental contract and its initiation on the basis of Art. 6 para. 1 p. 1 lit. b DSGVO as well as for the fulfilment of legal obligations (for example commercial and tax law) on the basis of Art. 6 para. 1 p. 1 lit. c DSGVO.

Furthermore, data is also processed for legitimate purposes pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO, such as marketing and internal company statistics. The legitimate interests lie in particular in the optimisation of processes and cost-appropriate allocation; your interests, fundamental rights and freedoms are duly taken into account here.

The data you provide is necessary for the performance of the contractual relationship. Without this data, we cannot fulfil the concluded contract.

If you have given us your consent, we will use your data to send you information about products, services, events and other interesting information about our company. You can object to this sending at any time with effect for the future.

Disclosure / Service provider

Some of your personal data will be passed on to external service providers (for example billing companies, tax advisors, legal advisors). In some cases, external IT service providers may access your data (as part of commissioned data processing pursuant to Article 28 DSGVO). In this case, the service providers act in accordance with instructions, which has been ensured by corresponding contracts.

Retention and deletion of data

Your data will be stored for as long as is necessary for the above-mentioned purposes. The data will be deleted at the latest after termination of the contractual relationship and after expiry of the statutory retention periods under civil, commercial and tax law.

Your rights

See below

Contact the Data Protection Officer

See below

We use various plugins from other service providers on our site, which we would like to inform you about below.

GoogleMaps

To simplify your journey, we offer you the use of Google Maps for displaying maps and creating directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These pages will be marked accordingly. By using this service, you agree to the collection, processing and use of the data collected and entered by Google. The terms of use for Google Maps can be found at http://www.google.com/intl/de_de/help/terms_maps.html [external page].

Web analysis with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

You can object to the use of your data by Google Analytics by installing a so-called add-on in your browser. To do this, you can follow the following link, which will take you to the Google page: http://tools.google.com/dlpage/gaoptout?hl=de [external page].

Facebook (Like-Button)

So-called plug-ins ("Like" button) from Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) are partially integrated on our website. When you call up the respective page on our website, it is transmitted to Facebook which of our Internet pages you have visited with your IP address. If you are logged in as a Facebook member, this will be assigned to your personal Facebook user account. When using the plug-in functions (e.g. clicking the "Like" button, submitting a comment), this information is also assigned to your Facebook account, which you can prevent by logging out before using the plug-in.

X

Functions of the X service are integrated on our pages. These functions are offered by X Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using X and the "Re-Tweet" function, the websites you visit are linked to your X account and made known to other users. In the process, data is also transmitted to X. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by X. You can find more information on this in X's privacy policy at twitter.com/privacy [external page]. You can change your X privacy settings in the account settings at: http://twitter.com/account/settings [external page].

LinkedIn

This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn "Recommend" button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website with you and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. You can find more information on this in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy [external page].

XING

Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING functions is accessed, a connection to XING servers is established. As far as we are aware, no personal data is stored in this process. In particular, no IP addresses are stored or usage behaviour evaluated. Further information on data protection and the XING Share button can be found in the XING data protection statement at: https://www.xing.com/app/share?op=data_protection [external page].

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy [external page].

What are social networks (social media) and why does LEG Thüringen use them?

Social networks or "social media" subsume a variety of digital technologies and media that also allow their users to get in touch with each other, to communicate and to exchange content. By way of example, but by no means exhaustively, some well-known providers are mentioned here:

• Social networks (for example Facebook, Twitter)
• Photo and video networks (e.g. YouTube)
• Mobile communities (e.g. Instagram, Snapchat)
• Messenger services (e.g. WhatsApp, Facebook Messenger)

These social media platforms have meanwhile changed or influenced the communication of many people, so that for many people the information channels are a natural part of their everyday life. Communication and information gathering have increasingly expanded from the "classic" internet to social media platforms in recent years. The essential difference and at the same time advantage of these social media platforms is that they can communicate information not only in one direction, but also enable dialogue and exchange between users. 

The central management and further development of our social media offerings is the responsibility of the Corporate Communications department.

Communication on social media platforms also needs rules and LEG Thüringen, as the person responsible for the content, is also required to regularly monitor compliance with certain rules of conduct. For exchanges via our communication channels, we assume that the exchanges on this site are met with courtesy, respect and mutual consideration.

• Insults, personal attacks, statements that violate the law, radical, sexist or racist posts will be deleted by us.
• The dissemination of political or religious messages has no place on this site and corresponding contributions will be deleted by us.4
• Contributions that contain self or third-party advertising as well as commercial contributions will be deleted.
• Personal or person-related data of others may not be published. We also advise caution in handling one's own personal data.

What advantages does LEG Thüringen hope to gain from using social media?

• Exchange and contact with citizens and interested parties
• Valuable communication tool in a crisis situation
• Cost-effective and direct access to the public
• Increasing the level of awareness
• Publicising the wide range of services offered by LEG Thüringen on behalf of the Free State of Thuringia for a wide variety of target groups
• Improved image
• Better findability in search engines
• Reaching new target groups
• Strengthening Thuringia as a business location
• Presentation as a modern, family-friendly employer
• Having a say where everyone else is
• Reaching specific target groups such as: Citizens, digital natives, job seekers, companies/start-ups

What are the risks of using social networks/Facebook?

• Spying on privacy
• Disclosure of private data
• Denunciation
• Discrediting
• Bullying
• Harassment through advertising/spam
• Identity theft
• Internet fraud
• Rip-off
• Distribution of malware
• Phishing

Which social media channels does LEG Thüringen use?

The social media landscape is huge. Over 260 providers are listed in 25 categories (as of 2017).

We maintain online presences within social networks and platforms to inform and communicate with the interested parties active there. 

LEG Thüringen operates its own presences in the social media listed below:

• https://www.facebook.com/LEG.Thueringen
• https://twitter.com/legthueringen
• https://www.xing.com/pages/legthuringen
• https://de.linkedin.com/company/leg-thüringen
• https://www.linkedin.com/showcase/thüringen-international
• https://www.linkedin.com/showcase/thaff
• https://www.linkedin.com/showcase/invest-in-thuringia
• https://www.linkedin.com/showcase/thueringer-clustermanagement
• https://www.instagram.com/leg_thueringen
• https://www.youtube.com/user/legthueringen
• https://de-de.facebook.com/thaff.thueringen
• https://www.xing.com/pages/thuringeragenturfurfachkraftegewinnung
• https://twitter.com/ThAFF

We would like to point out that user data may be processed outside the European Union. This may result in risks for the users, as the enforcement of the users' rights could be made more difficult.

In addition, user data may also be processed for market research and advertising purposes. For example, usage profiles can be created from the usage behaviour and resulting interests of the users. The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 lit. f. DSGVO. If users are asked by the respective providers for consent to data processing (i.e. declare their consent e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.

The following social networks are used by LEG Thüringen:

Facebook 

Facebook enables the presentation of personal profiles, company pages (so-called fan pages) for business presentations, as well as groups for the private discussion of common interests. The operator of the pages is Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Instead of using Facebook plugins, we have decided only to link to Facebook so that no personal data is automatically transmitted to Facebook when you visit our website. This technical solution also prevents us from automatically collecting personal data from you in this regard. Through the link, Facebook also only processes your personal data when you actively click on the Facebook button. However, if you were already logged into your Facebook account at the time you accessed our website, Facebook already processes at least the information about which of our websites you visited with your IP address, at what time and via which browser. We have no influence on the type and scope of your personal data that is processed by Facebook.

We only collect personal data from you via Facebook when you become active on our Facebook fan page, for which we are jointly responsible with Facebook, and disclose your personal data. By providing data on our Facebook page, you give us your consent to the processing of this data by us in accordance with Art. 6 para. 1 lit. a DSGVO.

For more information on how we handle your data, please see Facebook's privacy policy at: https://www.facebook.com/about/privacy [external page].

Information on how you can manage or delete information about yourself can be found at: https://www.facebook.com/privacy/explanation [external page].

We ourselves do not collect or process any data from your use of the service. However, if we share your comments or reply to them, or if we write posts that refer to your profile, we will also process the data you entered into the service, in particular your (user) name and the content published under your account, to the extent that these are included in our offer and made accessible to our fans.

Information pursuant to Art. 26 (2) DSGVO: There is a relationship between LEG Thüringen and the operator pursuant to Art. 26 (1) DSGVO (Joint Responsibility - see: Page-Insights supplement regarding the responsible party) [external page]. Within this framework, the operator operates the entire IT infrastructure of the service, maintains its own data protection provisions, maintains a separate user relationship with you (if you are a registered user of the service) and, together with LEG Thüringen, is also jointly responsible for the deletion of illegal or inappropriate posts and content on the site. In addition, the operator is solely responsible for all questions regarding the data of your user profile, to which we as a company do not have access.

In the case of information requests and the assertion of user rights, it is most effective to contact Facebook directly. Only Facebook has access to the users' data and can take appropriate measures and provide information.

The data controller regarding the respective user information is Facebook Ireland. This company can be contacted either online [external page] or by post to:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

You also have the right to lodge a complaint with Facebook Ireland's lead supervisory authority, the Irish Data Protection Commission, or with a local supervisory authority.

If you wish to exercise your data subject rights in relation to a particular data processing operation over which we have control, please contact us. We will then examine your request (e.g. request for information or objection) ourselves or, if necessary, forward it to the responsible operator if your request concerns data processing by the operator of the social media network.

X

X is a blogging service which, as a communication platform, enables the distribution of text messages with a maximum of 280 characters. The operator of the pages is X Corp. Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Instead of X plug-ins, we have decided only to link to X so that no personal data is automatically transmitted to X when you visit our website. Through the link, X only processes your personal data when you actively click on the X button. However, if you were already logged into your X account when you called up our website, X will already process your data. We have no influence on the type and scope of your personal data that is processed by X.

We only collect personal data from you via X when you become active on X and disclose your personal data. By disclosing data via X, you give us your consent to the processing of this data by us in accordance with Art. 6 (1) lit. a DSGVO.

You can find further information on the handling of your data in X's privacy policy at: https://twitter.com/en/privacy [external page].

LinkedIn

LinkedIn, like Xing, is a network in the professional environment with which one can maintain existing business contacts and establish new business contacts. The operator of the pages is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Instead of using plug-ins, we only link to LinkedIn. Therefore, your personal data is not automatically transmitted to LinkedIn when you visit our website. Through the link, LinkedIn only processes your personal data when you actively click on the LinkedIn button. We have no influence on the type and scope of your personal data that is processed by LinkedIn.

For further information on the handling of your data, please refer to LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy?_l=de_DE [external page].

XING 

Xing is a network that is primarily used in a professional environment. The operator of the pages is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. There is only a link to the XING website instead of using plug-ins. This means that your personal data is not automatically transmitted to XING when you visit our website. In the case of a mere link, XING only processes your personal data when you actively click on the XING button. However, if you are logged into your XING account when you visit our website, XING will process your personal data. We have no influence on the type and scope of your personal data that is processed by XING.

You can find further information on the handling of your data in the XING privacy policy at: https://privacy.xing.com/de/datenschutzerklaerung [external page].

YouTube 

YouTube is the largest, best-known and most popular video platform in the world. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC.

For data protection reasons, we have decided only to create a link to this page instead of using YouTube plug-ins. This means that we do not process any personal data from you in this regard, and YouTube cannot automatically collect any personal data from you when you visit our website, provided you are logged out of your YouTube account when you visit our website. This technical solution allows you to decide whether and when to transmit personal data to YouTube. Only when you actively click on the YouTube button does your browser establish a connection to YouTube's servers and transmit your user data to YouTube. We have no influence on the type and scope of your data that is processed by YouTube.

For further information on the handling of user data, please refer to YouTube's privacy policy at: www.google.de/intl/de/policies/privacy [external page].

Instagram 

Instagram is a free online service that allows its users to share photos and videos. Our website links to the Instagram website. The operator of the pages is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. We only link to the Instagram website instead of embedding Instagram plug-ins. Thus, your personal data is not automatically transmitted to Instagram when you visit our website. Instagram only processes your personal data when you actively click on the Instagram button. However, if you are logged into your Instagram account when you visit our website, Instagram will process your personal data. We have no influence on the type and scope of your personal data that is processed by Instagram.

For more information on the handling of your data, please refer to Instagram's data policy at: https://de-de.facebook.com/help/instagram/155833707900388 [external page].

Alternative information and communication channels

You don't necessarily have to log in to Facebook and the like to find out what LEG Thüringen has to offer. We can also be reached via our "normal" website at https://www.leg-thueringen.de.

Contact person for all data protection issues:

UIMC DR. VOSSBEIN GmbH & Co KG – Unternehmens- und Informations-Management Consultants 
Otto-Hausmann-Ring 113
42115 Wuppertal
Tel.: +49-202-946 7726 200

We evaluate this utilisation concept once a year.

We hereby inform you that pursuant to Article 15 et seq. DSGVO, you have the right of access to the personal data in question, as well as the right to rectification or erasure or to restriction of processing or the right to object to processing, as well as the right to data portability, subject to the conditions defined therein. You also have the right to lodge a complaint with a data protection supervisory authority under Article 77 of the GDPR if you consider that the processing of personal data concerning you infringes this Regulation. If the processing is based on Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR (consent), you also have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.

Right of access, Art. 15 DSGVO

You have the right to request information on whether and to what extent your personal data is being processed (in particular the purpose of processing, recipients of the data, storage period, etc.).

Right to rectification, Art. 16 DSGVO

You have the right to request that your stored data be corrected if it is incorrect or incomplete. This includes the right to completion through supplementary declarations or notifications.

Right to erasure, Art. 17 DSGVO

You have the right to request the deletion of your personal data. This is possible, for example, if the data is no longer required for the purposes for which it was collected or if the data must be deleted due to legal obligations. In individual cases, however, this right may be excluded.

Right to restriction of processing, Art. 18 DSGVO

You have the right to restrict the processing of your personal data. This is possible, for example, if your data is incorrectly recorded or the data processing is unlawful. In the case of restriction of processing, the data may only be processed in narrowly defined cases.

Right to data portability, Art. 20 DSGVO

You have the right to request that the data concerning you be handed over to you or to a responsible person to be named by you in a common electronic, machine-readable data format if you have provided this data yourself.

Right of objection, Art. 21 DSGVO

You have the right to object to the processing of personal data relating to you at any time with future effect for reasons arising from your particular situation, provided that the data processing is carried out to protect legitimate interests (cf. Art. 6 para. 1 lit. e), f) DSGVO). In the event of your objection, we will check whether the legal requirements for the processing of your data are met and, if this is not the case, we will refrain from any further processing of your data.

Right to complain to the data protection supervisory authority, Art. 77 DSGVO

You have the right to contact the competent supervisory authority of the Union or the member states at any time regarding possible violations of data protection regulations.

If you have any questions regarding the processing of your personal data, you can contact our data protection officer directly, who is also available with his team in the event of requests for information, applications or complaints.

Dr. Jörn Voßbein, External Data Protection Officer, Otto-Hausmann-Ring 113, 42115 Wuppertal, Germany

https://Datenschutz.UIMC.de

Tel: 0202 - 946 772 620 0