We take data protection seriously and handle your information responsibly. Below, we have compiled the necessary information regarding the use of our website. Please note: The use of contact details published as part of our legal notice requirements by third parties for the purpose of sending unsolicited advertising and information materials is strictly prohibited. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
Website Privacy Policy and Information for Data Subjects pursuant to Articles 13 and 14 of the EU General Data Protection Regulation
General Information
Details of the Responsible Entity:
Company: 390° GmbH
Legal Representatives / Managing Directors: Philip Günther, Kassian A. Goukassian
Address: Lerchenstraße 28, 22767 Hamburg
General Information on Data Processing
1. Access Data / Server Log Files
390° collaborates with the web hosting provider Host Europe. This host collects data on every access to the website (so-called server log files). Logs for certain services on the server are recorded automatically. All log files are rotated daily. Logs from the previous day are archived and available for the specified retention period.
– Access Log File
Contains: All accesses to your website, i.e., client, URL of the request, IP address, date and time of the request, type of service used; retention period: 60 days
– Error Log File
Contains: Error messages from PHP, CGI, and the web server itself; retention period: 7 days
– MySQL Slow Query Log
Contains: MySQL queries running longer than 2 seconds; retention period: 7 days
2. Affected Data
Personal data is only collected if you provide it to us voluntarily. No additional personal data is collected beyond this. Any processing of your personal data beyond the scope of statutory permissions will only occur based on your explicit consent.
Purpose of Processing:
Contract execution
Categories of Recipients:
Public authorities when required by overriding legal provisions, e.g., tax authorities or social security agencies.
External service providers or other contractors, e.g., for data processing and hosting, payroll, travel expense accounting, and insurance services.
Other external entities, provided the data subject has given consent or if the transfer is permitted due to overriding interests.
Transfers to Third Countries:
No processors outside the European Union are used.
Data Storage Duration:
The duration of data storage is governed by statutory retention obligations and is generally 10 years.
Specific Information about the Website
Integration of Third-Party Services and Content
This website integrates third-party content, such as videos from YouTube and Facebook. This always requires that the providers of this content (hereinafter referred to as "third-party providers") collect the user's IP address. Without the IP address, they cannot send the content to the user's browser. The IP address is therefore necessary for displaying this content. We strive to use only content whose providers use the IP address solely for content delivery. However, we have no influence if third-party providers store the IP address, e.g., for statistical purposes.
Website Tracking
This website partially uses cookies to make the offer more user-friendly, effective, and secure. Cookies are small text files stored on your computer by your browser, enabling analysis of your website usage. You can prevent the storage of the cookies listed below by adjusting your browser settings; however, this may limit your ability to fully use all website functions.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). The information generated by the cookie about your use of the website is generally transmitted to a Google server in the USA and stored there. On behalf of the website operator, Google uses this information to evaluate your website usage, compile reports on website activities, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent cookie storage by adjusting your browser settings; however, this may limit your ability to fully use all website functions. Additionally, you can prevent the collection of data generated by the cookie (including your IP address) and its processing by Google by downloading and installing the browser plugin available at the following link. Only anonymized IP addresses are used and processed to exclude direct personal traceability.
Use of Hotjar
This website uses the web analytics service Hotjar, operated by Hotjar Ltd., based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe). Hotjar is a website analytics tracker for data analysis, website usage, and performance measurement, e.g., tracking how far users scroll or which buttons they click. The tool also allows direct feedback from website users, providing valuable insights to make our websites faster and more user-friendly. Hotjar offers users the option to prevent tracking by using a "Do Not Track" header, ensuring no data about the website visit is recorded. This setting is supported by all common browsers in their latest versions. Your browser sends a request to Hotjar to disable tracking for the respective user. If you use our website with different browsers or devices, you must enable the "Do Not Track" header for each browser/device separately. Detailed instructions for your browser can be found at: https://www.hotjar.com/opt-out. Hotjar’s privacy policy is available at: https://www.hotjar.com/privacy.
Use of SalesViewer® Technology
This website uses SalesViewer® technology from CONCEPTPARTNER® GmbH to collect and store data for marketing, market research, and optimization purposes. Usage profiles can be created under a pseudonym from this data using tracking scripts that collect company-related data. The data collected with this technology is not used to personally identify website visitors without their explicit consent and is not merged with personal data about the pseudonym holder. You can object to data collection and storage at any time with future effect by visiting https://www.salesviewer.com/opt-out to prevent tracking by SalesViewer® on this website. An opt-out cookie will be placed on your device. If you delete cookies in this browser, you must click the link again.
Google Remarketing
DoubleClick by Google, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland), uses cookies to display relevant advertisements. A pseudonymous identification number (ID) is assigned to your browser to track which ads have been shown and accessed. The cookies contain no personal information. The use of DoubleClick cookies enables Google and its partner websites to serve ads based on previous visits to our or other websites. The information generated by the cookies is transmitted to a Google server in the USA and stored there. Google complies with the data protection provisions of the "US Safe Harbor" agreement and is registered with the US Department of Commerce’s "Safe Harbor" program. Google will not merge your data with other data collected by Google.
By using our website, you consent to the processing of data collected about you by Google in the manner and for the purposes described above. You can prevent cookie storage by adjusting your browser settings. Additionally, you can prevent the collection and processing of data generated by cookies by downloading and installing the browser plugin available under the "DoubleClick Deactivation Extension" section at: https://policies.google.com/technologies/ads?hl=en.
Cookies are also used for Google’s remarketing technology or "similar audiences" function to analyze visitor behavior and interests. This technology allows targeted advertising on Google’s partner network for users who have already visited and shown interest in the website. If users have consented to linking their web and app browsing history with their Google account for personalized ads, remarketing is applied across devices. Google Analytics collects authenticated IDs of these users, temporarily linking them with Google Analytics data to create audience segments. Data may be transferred to the USA, where an adequacy decision by the European Commission exists.
Processing is based on Art. 6(1)(f) GDPR, justified by the legitimate interest in targeting website visitors with personalized, interest-based ads when visiting other websites in the Google Display Network. You have the right to object to this processing based on Art. 6(1)(f) GDPR for reasons related to your specific situation. Google users can adjust their ad settings under "My Account" or disable personalized ads. You can permanently disable Google cookies by downloading and installing the plugin at: https://support.google.com/ads/answer/7395996?hl=en Alternatively, you can disable third-party cookies by visiting the Network Advertising Initiative’s opt-out page at: https://www.networkadvertising.org/choices/. Further information on Google Remarketing and its privacy policy is available at: https://www.google.com/privacy/ads/
Use of Facebook Retargeting
Our website integrates remarketing tags from the social network Facebook (1601 South California Avenue, Palo Alto, CA 94304, USA). When you visit our website, these tags establish a direct connection between your browser and the Facebook server. Facebook receives information that you visited our site with your IP address, allowing Facebook to associate the visit with your user account. We can use this information to display Facebook Ads. This function targets website visitors with interest-based advertising on the Facebook social network. When you visit Facebook, personalized, interest-based ads are displayed. Processing is based on Art. 6(1)(f) GDPR, justified by the legitimate interest in the above purpose.
You have the right to object to this processing based on Art. 6(1)(f) GDPR for reasons related to your specific situation. If you do not wish for data collection via Custom Audiences, you can deactivate it here: [link to Facebook Custom Audiences opt-out].
We note that, as the website provider, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information is available in Facebook’s privacy policy at: https://www.facebook.com/about/privacy/ .
Use of Google Tag Manager
We use Google Tag Manager to implement additional plugins on our website. Google Tag Manager does not process personal data itself; data processing occurs through the installed plugins, as noted separately in this privacy policy.
PlugIns
Integration of YouTube
Our website uses the YouTube video platform, a service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland). YouTube enables the embedding and playback of audio and video files. When you access a page on our website with an embedded YouTube player, a connection to YouTube is established to play the video or audio file, transmitting data to YouTube. We note that, as the website provider, we have no knowledge of the content of the transmitted data or its use by YouTube. Further information is available in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Comment Function in the 390° Blog
When users leave comments in the blog or other posts, their IP addresses are stored for the provider’s security. This is to protect the provider in case illegal content (e.g., insults, prohibited political propaganda) is posted in comments or contributions. In such cases, the provider may be held liable and is therefore interested in the author’s identity.
Use of Gravatar
This website uses the external avatar service Gravatar, operated by Automattic, Inc. (132 Hawthorne Street, San Francisco, CA 94107, USA), to display user images in comments. The email address provided in the comments is transmitted to Gravatar to display any associated user image. The email address is encrypted and sent to Gravatar’s servers, which deliver the images to our website for embedding in comments. Gravatar may store the user’s IP address during this process. Further information on data collection and use by Gravatar is available in their privacy policy at: https://automattic.com/privacy/. If users do not want a Gravatar-linked user image to appear in comments, they should use an email address not registered with Gravatar for commenting.
Facebook Share Button
This website uses social plugins from Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA). When you access pages containing such a plugin, data about your visitor behavior is automatically transmitted to Facebook’s servers. The website operator has no influence over the nature and extent of the data collected and transmitted to Facebook. If you are logged into Facebook, it can associate the visit with your Facebook account. Further information on Facebook’s data protection is available at: http://www.facebook.com/policy.php.
This website uses social plugins from LinkedIn (LinkedIn, 2029 Stierlin Court, Mountain View, CA 94043, USA). When the "in" button is activated, a connection to LinkedIn’s servers is established. The content of the "in" button is transmitted directly to your browser and embedded in the website. Your IP address may be transmitted to LinkedIn in the USA. For the purpose and scope of data collection, further processing, and use by LinkedIn, as well as your rights and privacy settings, refer to LinkedIn’s privacy policy at: http://www.linkedin.com/legal/privacy-policy. If you are a LinkedIn member and do not want LinkedIn to collect data about you via the activated "in" button and link it to your LinkedIn account, you must log out of LinkedIn before visiting our website.
This website uses social plugins from XING (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany). When the "XING" button is activated, a connection to XING’s servers is established, and the XING Share Button functions (e.g., calculation/display of the counter value) are loaded. XING does not store personal data or IP addresses from your visit to this website, nor does it evaluate your usage behavior through cookies related to the "XING Share Button." Current data protection information for the "XING Share Button" is available at: https://www.xing.com/app/share?op=data_protection.
This website uses social plugins from Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). When you access a page containing such a button, your browser establishes a direct connection to Twitter’s servers. The content of the Twitter buttons is transmitted directly to the user’s browser. The provider has no influence over the extent of data collected by Twitter via this plugin and informs users based on its knowledge. According to this, only the user’s IP address and the URL of the respective website are transmitted with the button but are not used for purposes other than displaying the button. Further information is available in Twitter’s privacy policy at: http://twitter.com/privacy.
This website uses social plugins from the Pinterest social network, operated by Pinterest Inc. (808 Brannan Street, San Francisco, CA 94103, USA). When you access a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin content is transmitted directly to your browser and embedded in the page. Pinterest receives information that your browser accessed the corresponding page, even if you do not have a Pinterest profile or are not logged in. This information (including your IP address) is transmitted to a Pinterest server in the USA and stored. If you are logged into Pinterest, it can directly associate your visit to our website with your Pinterest profile. Interacting with plugins, e.g., clicking the "Pin it" button, transmits this information to Pinterest’s servers, where it is stored and published to your contacts. For the purpose, scope, and further processing of data by Pinterest, as well as your rights and privacy settings, refer to Pinterest’s privacy policy at: https://about.pinterest.com/de/privacy-policy. To prevent Pinterest from associating data with your profile, log out of Pinterest before visiting our website. You can also prevent Pinterest plugins from loading using browser add-ons like "NoScript" http://noscript.net/.
Tumblr
This website uses social plugins from Tumblr (Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA). When you access a page containing such a button, your browser establishes a direct connection to Tumblr’s servers. The content of the Tumblr buttons is transmitted directly to the user’s browser. The provider has no influence over the extent of data collected by Tumblr via this plugin and informs users based on its knowledge. According to this, only the user’s IP address and the URL of the respective website are transmitted with the button but are not used for purposes other than displaying the button. Further information is available in Tumblr’s privacy policy at: http://www.tumblr.com/policy/de/privacy.
This website integrates plugins from the social network Reddit (Reddit Inc., 520 Third Street, Suite 305, San Francisco, CA 94107, USA). Reddit plugins are identifiable by the orange Reddit smiley logo. When you click the Reddit share button while logged into your Reddit account, you can link our website’s content to your Reddit profile. Reddit can associate the visit with your user account. We note that, as the website provider, we have no knowledge of the content of the transmitted data or its use by Reddit. Further information is available in Reddit’s privacy policy at: https://www.reddit.com/help/privacypolicy. To prevent Reddit from associating your visit with your account, log out of Reddit before visiting our website.
Information on further data processing procedures
Affected Data
Data provided for contract execution; additional data processed based on your explicit consent, if applicable.
Processing Purpose:
Contract execution, e.g., offers, orders, sales, invoicing, quality assurance.
Categories of Recipients:
- Public authorities when required by overriding legal provisions.
- External service providers or contractors, e.g., for data processing, hosting, shipping, transport, logistics, printing, and call centers.
- Other external entities if the data subject has given consent or if transmission is permissible due to overriding interests.
Third-Country Transfers:
No processors outside the European Union are used.
Data Storage Duration:
The duration of data storage is governed by statutory retention requirements and is generally 10 years.
Contact Data Details
Contact data is personal information required to enable communication between 390° GmbH and the user. The following data is transmitted and stored when using the contact form on our website:
- Name (required field)
- Email address (required field)
- Subject
- Phone number
- Message
Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted with the email is stored. No data is passed on to third parties in this context; the data is used exclusively for processing the conversation.
The legal basis for processing data transmitted via email or the contact form is Art. 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.
Data is deleted as soon as it is no longer required for the purpose of its collection, i.e., when the conversation with the user is concluded, as indicated by the circumstances.
Users can revoke their consent to the processing of personal data at any time. If a user contacts 390° via email, they can object to the storage of their personal data by including the following statement in the email:
"I object to the storage of my personal data sent via this email. I understand that continuing the conversation will not be possible."
In such cases, all personal data stored during the contact will be deleted.
Handling of Personal Data in the Application Process
Affected Data:
When visiting the 390° job page, the following data is processed by the Recruitee software used by 390°: Traffic source, HTTP requests and responses, cookies, date, and time of use.
All personal data provided in the application form, including but not limited to:
- Full name, email address, phone number, photo, cover letter, resume, LinkedIn profile, Indeed profile, and the job applied for.
- Status, scheduling, and notes regarding your application, email communication.
Processing Purpose:
Conducting the application process.
Categories of Recipients: - Public authorities when required by overriding legal provisions.
- External service providers: 390° uses Recruitee software for efficient application processing.
Third-Country Transfers:
No processors outside the European Union are used.
Data Storage Duration:
Application data is generally deleted 180 days after the decision is communicated, unless consent for longer storage in the applicant pool is given.
Applicants can revoke their consent to the processing of personal data or request data changes at any time. In such cases, the stored personal data will be deleted or modified.
Applications via Indeed or LinkedIn require processing of personal data to enable the "Apply with LinkedIn" and "Apply with Indeed" functions. LinkedIn and Indeed may use cookies. Their privacy policies are available at:
https://www.linkedin.com/legal/privacy-policy
Processing of Employee Data
Affected Data:
Data provided for contract execution; additional data processed based on your explicit consent, if applicable.
Processing Purpose:
Contract execution within the employment relationship.
Categories of Recipients:
- Public authorities when required by overriding legal provisions, e.g., tax authorities, social security agencies.
- External service providers or contractors, e.g., for data processing, hosting, payroll accounting, travel expense accounting, insurance services.
- Other external entities if the data subject has given consent or if transmission is permissible due to overriding interests.
Third-Country Transfers:
No processors outside the European Union are used.
Data Storage Duration:
The duration of data storage is governed by statutory retention obligations and is generally 10 years.
Processing of Supplier Data
Affected Data:
Data provided for contract execution; additional data processed based on your explicit consent, if applicable.
Processing Purpose:
Contract execution, e.g., inquiries, purchasing, quality assurance.
Categories of Recipients:
- Public authorities when required by overriding legal provisions.
- External service providers or contractors, e.g., for data processing, hosting, accounting, payment processing.
- Other external entities if the data subject has given consent or if transmission is permissible due to overriding interests.
Third-Country Transfers:
No processors outside the European Union are used.
Data Storage Duration:
The duration of data storage is governed by statutory retention obligations and is generally 10 years.
Additional Information and Contacts
You can exercise your rights to access, correction, deletion, restriction of processing, objection to processing, or data portability at any time. Contact us via email or letter at: https://www.390.de/impressum/. You also have the right to lodge a complaint with a data protection supervisory authority.
Employees and service providers commissioned by the provider are obligated to maintain confidentiality and comply with the provisions of the Federal Data Protection Act and other professional data protection regulations.
Changes to the Privacy Policy
We reserve the right to amend the privacy policy to adapt to changed legal situations or changes in the service or data processing. However, this only applies to statements regarding data processing. If user consent is required or parts of the privacy policy include provisions of the contractual relationship with users, changes will only be made with user consent.
Users are requested to regularly review the content of the privacy policy.
Data Security
We use the widespread SSL (Secure Socket Layer) procedure for website visits, with the highest encryption level supported by your browser, typically 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize whether an individual page is transmitted encrypted by the closed key or lock symbol in your browser’s status bar.
We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We take data protection seriously and handle your data responsibly. We have compiled the necessary information regarding the use of our website below. Please note: The use of contact details published as part of our legal notice requirements by third parties for the purpose of sending unsolicited advertising and information materials is strictly prohibited. The site operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
Website Privacy Policy and Information for Data Subjects pursuant to Articles 13 and 14 of the EU General Data Protection Regulation
General Information
Information on the controller:
Company: 390° GmbH
Legal representative / Managing Director: Philip Günther, Kassian A. Goukassian
Address: Lerchenstraße 28, 22767 Hamburg
General data processing information
1. Access data/server log files
390° works with the web hosting provider Host Europe. This host collects data on every access to the site (so-called server log files). Protocols (so-called log files) are automatically recorded for specific services on the server. All log files are rotated daily. The logs from the previous day are archived and remain available for the specified retention period.
– Access log file
Includes: All access to your websites, i.e., client, URL requested, IP address, date and time of access, type of service used, retention period: 60 days
– Error log file
Contains: Error messages from PHP, CGI, and the web server itself, retention period: 7 days
– MySQL slow query log
Contains: Slow-running MySQL queries (longer than 2 seconds), retention period: 7 days
2. Data concerned
Personal data is only collected if you provide it to us voluntarily. No other personal data is collected. Any processing of your personal data beyond the scope of statutory legal permissions will only take place on the basis of your express consent.
Purpose of processing:
Contract performance
Categories of recipients:
Public authorities where required by overriding legislation, including tax offices and social security institutions.
External service providers or other contractors, including for data processing and hosting, payroll accounting, travel expense accounting, and insurance services.
Other external bodies, provided the data subject has given their consent or a transfer is permissible due to an overriding interest.
Transfers to third countries:
No data processors outside the European Union are used.
Data storage duration:
The duration of data storage is based on statutory retention requirements and is generally 10 years.
Specific information regarding the website
Integration of third-party services and content
This website incorporates third-party content, such as videos from YouTube and Facebook. This always requires the providers of this content (hereinafter referred to as "third-party providers") to perceive the user's IP address. Without the IP address, they would not be able to send the content to the respective user's browser. The IP address is therefore necessary for the display of this content. We strive to use only such content whose respective providers use the IP address solely for the delivery of the content. However, we have no control over whether third-party providers store the IP address, for example, for statistical purposes.
Website Tracking
This website uses cookies. These serve to make our site more user-friendly, effective, and secure. Cookies are small text files placed on your computer and stored by your browser, which enable an analysis of your use of the website. You can prevent the storage of the cookies mentioned below by adjusting your browser software settings; however, please note that if you do so, you may not be able to use the full functionality of this website.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by adjusting your browser software settings; however, please note that if you do so, you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie regarding your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link. Through settings on the provider's website, only anonymized IP addresses are used and processed in truncated form to exclude direct personal identification.
Use of Hotjar
Our website uses the web analytics service Hotjar, provided by Hotjar Ltd. (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe). This tool tracks website analytics, usage, and performance. For example, it allows us to see how far users scroll and which buttons they click and how often. Furthermore, the tool enables us to collect direct feedback from website users. This provides us with valuable information to make our websites faster and more user-friendly. Hotjar offers every user the option to prevent the use of the tool via a "Do Not Track" header, ensuring no data about your visit is recorded. This is a setting supported by all common modern browsers. Your browser sends a request to Hotjar to disable tracking for that specific user. If you use our website with different browsers or computers, you must set up the "Do Not Track" header for each one separately. Detailed instructions for your browser can be found here: https://www.hotjar.com/opt-out. You can find Hotjar Ltd.'s privacy policy here: https://www.hotjar.com/privacy.
Use of SalesViewer® Technology
This website uses SalesViewer® technology from CONCEPTPARTNER® GmbH to collect and store data for marketing, market research, and optimization purposes. This data may be used to create pseudonymized usage profiles. Tracking scripts are employed for this purpose to collect company-related data. Data collected via this technology will not be used to personally identify visitors to this website without their explicit consent, nor will it be merged with personal data regarding the bearer of the pseudonym. You may object to the collection and storage of this data at any time with future effect by visiting this link: https://www.salesviewer.com/opt-out to prevent future tracking by SalesViewer® on this website. An opt-out cookie will be stored on your device for this website. If you delete your cookies in this browser, you will need to click this link again.
Google Remarketing
DoubleClick by Google is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland ("Google"). DoubleClick by Google uses cookies to present you with relevant advertisements. A pseudonymous identification number (ID) is assigned to your browser to check which ads have been displayed in your browser and which ads have been accessed. The cookies do not contain any personal information. The use of DoubleClick cookies merely enables Google and its partner websites to serve ads based on previous visits to our or other websites on the internet. The information generated by the cookies is transmitted by Google to a server in the USA for evaluation and stored there. Google complies with the data protection provisions of the "US-Safe-Harbor" agreement and is registered with the US Department of Commerce's "Safe Harbor" program. Under no circumstances will Google associate your data with other data collected by Google.
By using our websites, you consent to the processing of data collected about you by Google in the manner and for the purposes described above. You can prevent the storage of cookies by adjusting your browser software settings accordingly. Furthermore, you can prevent the collection of data generated by cookies regarding your use of the websites by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link under "DoubleClick Deactivation Extension."
Further information on DoubleClick by Google and data protection can be found at: https://policies.google.com/technologies/ads?hl=en.
Cookies are also used for Google Inc.'s remarketing technology or "Similar Audiences" function. This function serves to analyze visitor behavior and interests. Through this technology, users who have already visited this website and shown interest in the offerings are re-engaged through targeted advertising on the pages of the Google Partner Network. If users have consented to Google linking their web and app browsing history to their Google account and using information from their Google account to personalize ads, the remarketing function works across devices. To support this function, Google Analytics collects Google-authenticated IDs of these users. This personal data is temporarily linked with Google Analytics data to create target groups. Your data may also be transferred to the USA. An adequacy decision by the European Commission is in place for data transfers to the USA.
This processing is based on Article 6(1)(f) of the GDPR, based on the legitimate interest of targeting website visitors with advertising by displaying personalized, interest-based ads to visitors of the provider's website when they visit other websites in the Google Display Network.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
Google users can adjust their ad settings under "My Account" or deactivate personalized ads. You can permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=en Alternatively, you can deactivate the use of third-party cookies by visiting the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ and following the instructions provided there.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/
Use of Facebook Retargeting
Our website uses remarketing tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit our pages, these remarketing tags establish a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site with your IP address, allowing Facebook to associate your visit with your user account. We may use the information obtained in this way to display Facebook Ads. This function serves the purpose of targeting website visitors with interest-based advertising on the social network Facebook. When you visit Facebook, you will then be shown personalized, interest-based Facebook ads. This processing is based on Article 6(1)(f) of the GDPR, stemming from our legitimate interest in the aforementioned purpose.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR. If you do not wish for data to be collected via Custom Audiences, you can deactivate Custom Audiences here.
Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used by Facebook. Further information can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Tag Manager
We use Google Tag Manager to implement additional plug-ins on our website. However, Google Tag Manager does not process any personal data itself. Data is only processed by the other installed plug-ins, which are addressed separately within the scope of this privacy policy.
Plug-ins
Integration of YouTube
Our website uses the video platform YouTube. YouTube is a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland). YouTube enables the embedding and playback of audio and video files. When you visit a page on our website, the embedded YouTube player establishes a connection to YouTube so that the video or audio file can be played. Data is transmitted to YouTube during this process. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used by YouTube. Further information can be found in YouTube's privacy policy at: https://www.google.de/intl/en/policies/privacy/
Comment function on the 390° blog
When users leave comments on the blog or other posts, their IP addresses are stored. This is done for the provider's security in case someone writes illegal content in comments or posts (insults, prohibited political propaganda, etc.). In such cases, the provider could be held liable for the comment or post and is therefore interested in the identity of the author.
Use of Gravatar
This website uses the external avatar service Gravatar to display user images in comments, which is operated by Automattic, Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA. The email address provided in the comments is transmitted to Gravatar in order to display any user image associated with this email address within the comments. The email address is encrypted before being transmitted to Gravatar's servers, which in turn deliver the user images to our website to be integrated into our comments section. By displaying these images, Gravatar may store the user's IP address. Further information on the collection and use of data by Gravatar can be found in Gravatar's privacy policy: https://automattic.com/privacy/. If users do not want a user image associated with their email address at Gravatar to appear in the comments, they should use an email address that is not registered with Gravatar when posting comments.
Facebook Share Button
This website uses social plugins from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter "Facebook"). When you visit pages that contain such a plugin, data about your visitor behavior is automatically transmitted to Facebook's servers. The website operator has no influence on the nature and scope of the data collected and transmitted to Facebook. If you are logged into Facebook, Facebook can associate your visit with your Facebook account. Further information on data protection on Facebook can be found at http://www.facebook.com/policy.php.
This website uses social plugins from LinkedIn, LinkedIn, 2029 Stierlin Court, Mountain View, CA 94043, USA. When the "in" button is activated, a connection to the LinkedIn server is established. The content of the "in" button is transmitted directly from LinkedIn to your browser and integrated into the website by it. It is possible that your IP address may be transmitted to LinkedIn in the USA in this way. For the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your rights and settings options for protecting your privacy, please refer to LinkedIn's privacy policy (http://www.linkedin.com/legal/privacy-policy). If you are a LinkedIn member and do not want LinkedIn to collect data about you via our website and link it to your member data stored at LinkedIn when the "in" button is activated, you must log out of LinkedIn before visiting our website.
This website uses social plugins from XING, XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. When the "XING" button is activated, a connection to the XING server is established, and the XING share button functions (in particular, the calculation/display of the counter value) are reloaded on the respective page. XING does not store any personal data about you when you visit this website. In particular, XING does not store IP addresses. There is also no analysis of your usage behavior through the use of cookies in connection with the "XING Share Button." You can access the current privacy information regarding the "XING Share Button" and supplementary information on this website: https://www.xing.com/app/share?op=data_protection.
This website uses social plugins from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. When a user visits a page on this website that contains such a button, their browser establishes a direct connection to Twitter's servers. The content of the Twitter button is transmitted directly from Twitter to the user's browser. The provider therefore has no influence on the scope of the data that Twitter collects with the help of this plugin and informs users according to its current state of knowledge. According to this, only the user's IP address and the URL of the respective website are transmitted when the button is accessed, but they are not used for any purposes other than displaying the button. Further information on this can be found in Twitter's privacy policy at http://twitter.com/privacy.
This website uses social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest").
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Pinterest's servers. The content of the plugin is transmitted by Pinterest directly to your browser and integrated into the page. Through this integration, Pinterest receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on Pinterest or are not currently logged into Pinterest. This information (including your IP address) is transmitted by your browser directly to a Pinterest server in the USA and stored there. If you are logged into Pinterest, Pinterest can directly associate your visit to our website with your Pinterest profile. If you interact with the plugins, for example by clicking the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there. The information is also published on Pinterest and displayed to your contacts there.
For the purpose and scope of data collection and the further processing and use of the data by Pinterest, as well as your rights and settings options for protecting your privacy, please refer to Pinterest's privacy policy: https://about.pinterest.com/en/privacy-policy. If you do not want Pinterest to directly associate the data collected via our website with your Pinterest profile, you must log out of Pinterest before visiting our website. You can also completely prevent the loading of Pinterest plugins with add-ons for your browser, e.g., using the script blocker "NoScript" (http://noscript.net/).
Tumblr
This website uses Tumblr social plugins. These buttons are provided by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA, hilfe@tumblr.com. When a user visits a page on this website that contains such a button, their browser establishes a direct connection to Tumblr's servers. The content of the Tumblr buttons is transmitted by Tumblr directly to the user's browser. The provider therefore has no influence on the scope of the data that Tumblr collects with the help of this plugin and informs users according to its current knowledge. According to this, only the user's IP address and the URL of the respective website are transmitted when the button is accessed, but they are not used for any purposes other than displaying the button. Further information on this can be found in Tumblr's privacy policy at http://www.tumblr.com/policy/en/privacy.
Plugins from the social network Reddit (Reddit Inc., 520 Third Street, Suite 305, San Francisco, CA 94107, USA) are integrated into our pages. You can recognize the Reddit plugins by the orange Reddit smiley logo on our site.
If you click the Reddit share button while logged into your Reddit account, you can link the content of our pages to your Reddit profile. This allows Reddit to associate your visit to our pages with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Reddit. Further information on this can be found in Reddit's privacy policy at: https://www.reddit.com/help/privacypolicy
If you do not want Reddit to associate your visit to our pages with your Reddit user account, please log out of your Reddit user account beforehand.
Information on other data processing procedures
Contact details/prospective customer data
Data concerned: Data provided for contract execution; where applicable, additional data processed on the basis of your explicit consent.
Purpose of processing: Contract execution, including quotes, orders, sales and invoicing, and quality assurance.
Categories of recipients: Public authorities where there are overriding legal provisions.
External service providers or other contractors, including those for data processing and hosting, shipping, transport and logistics, service providers for printing and mailing information, and call centers.
Other external bodies, provided the data subject has given their consent or a transfer is permitted due to an overriding interest.
Third-country transfers: No processors outside the European Union are used.
Data retention period: The duration of data storage is based on statutory retention requirements and is generally 10 years.
Contact details are personal data required to facilitate communication between 390° GmbH and the user.
When you contact us electronically via the contact form on our website, the following data is transmitted to 390° and stored upon completion of the input form:
- Name (required)
- Email address (required)
- Subject
- Phone number
- Message
Alternatively, you may contact us via the provided email address. In this case, the user's personal data transmitted with the email will be stored. No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.
The legal basis for processing data transmitted in the course of sending an email or using the contact form is Art. 6(1)(f) GDPR. If the email contact aims at the conclusion of a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR.
Data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form input mask and data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
Users have the right to withdraw their consent to the processing of their personal data at any time. If a user contacts 390° via email, they may object to the storage of their personal data at any time by including the following sentence in their email; in such a case, the conversation cannot be continued or completed:
"I object to the storage of my personal data sent via this email. I am aware that it will not be possible to continue or complete the conversation."
In this case, all personal data stored during the contact process will be deleted.
Information on the handling of personal data during the
Application process
Data concerned:
When you visit the 390° careers page, the following data is processed by Recruitee, the software used by 390°: On behalf of the data controller, the processor handles the following categories of personal data regarding visitors: traffic source, HTTP requests and responses, cookies, and the date and time of use.
All personal data you provide in our application form, including but not limited to:
Full name, email address, phone number, photo, cover letter, resume, LinkedIn profile, Indeed profile, and the job you applied for. Status, scheduling, and notes regarding your application, as well as email correspondence.
Purpose of processing: Conducting the application process.
Categories of recipients: Public authorities, where required by overriding legal provisions.
External service providers: 390° uses Recruitee software to ensure a smooth and efficient application process.
Transfers to third countries: No data processors outside the European Union are used.
Data retention period: Application data is generally deleted 180 days after you have been notified of the decision, unless you have consented to a longer retention period by joining our talent pool.
Applicants may withdraw their consent to the processing of their personal data or request changes to their data at any time. In such cases, the personal data stored during the application process will be deleted or updated accordingly.
If you apply via Indeed or LinkedIn, your personal data must be processed to enable the "Apply with LinkedIn" and "Apply with Indeed" features. LinkedIn and Indeed may use cookies. You can find their privacy policies on the following websites:
https://www.linkedin.com/legal/privacy-policy
Specific information on the processing of employee data
Data concerned: Data provided for contract execution; where applicable, additional data processed on the basis of your explicit consent.
Purpose of processing: Contract execution within the scope of the employment relationship
Categories of recipients:
Public authorities where overriding legal provisions exist, including tax offices and social security institutions.
External service providers or other contractors, including for data processing and hosting, payroll accounting, travel expense accounting, and insurance services.
Other external bodies, provided the data subject has given their consent or a transfer is permitted due to an overriding interest.
Third-country transfers: No processors outside the European Union are used.
Data retention period: The duration of data storage is based on statutory retention requirements and is generally 10 years.
Specific information on the processing of supplier data
Data concerned:
Data provided for contract performance; where applicable, additional data processed on the basis of your explicit consent.
Purpose of processing:
Contract performance, including inquiries, purchasing, and quality assurance.
Categories of recipients:
Public authorities where there is a legal obligation to do so.
External service providers or other contractors, including for data processing and hosting, accounting, and payment processing.
Other external bodies, provided the data subject has given their consent or a transfer is permitted due to overriding interests.
Transfers to third countries:
No processors outside the European Union are used.
Data retention period:
The duration of data storage is based on statutory retention requirements and is generally 10 years.
Further Information and Contacts
Furthermore, you may assert your rights to access, rectification, erasure, restriction of processing, or the right to object to processing, as well as the right to data portability at any time. You can contact us by email or letter here [https://www.390.de/impressum/]. You also have the right to lodge a complaint with a data protection supervisory authority.
Our employees and the service providers commissioned by us are bound to confidentiality and to compliance with the provisions of the Federal Data Protection Act and other relevant data protection regulations.
Changes to the Privacy Policy
We reserve the right to amend the privacy policy to reflect changes in legal requirements or updates to our services and data processing. This applies only to statements regarding data processing. If user consent is required or if parts of the privacy policy contain provisions governing the contractual relationship with users, the changes will only be made with the users' consent.
Users are requested to check the content of the privacy policy regularly.
Data Security
When you visit our website, we use the common SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed key or lock icon in the status bar of your browser.
We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
