Privacy policy

Scope

This data protection declaration applies exclusively to this website "Publicis Media" and the personal data to be processed therein and the companies commissioned by us (order processors). By personal data, we mean information within the meaning of Art. 4 No. 1 DSGVO, such as a person's name, e-mail address and postal address.

 

Legal basis

The following Privacy Policy provides you with all the information regarding the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, that enable us to process personal data. As such, this policy will refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL of 27 April 2016.

 

We will only process your data if one of the following applies:

  1. Consent (Article 6 (1)(a) GDPR): You have given your consent for us to process your data for a specific purpose.
  2. Contract (Article 6 (1)(b) GDPR): We are processing your data in order to fulfil a contract or pre-contractual obligations that has or have been agreed with you. For example, if you send us an application.
  3. Legal obligation (Article 6 (1)(c) GDPR): We have a legal obligation to process your data. For example, we are required by law to retain part of your application in the event of a rejection.
  4. Legitimate interests (Article 6 (1)(f) GDPR): We reserve the right to process personal data in the event of legitimate interests that do not restrict your fundamental rights, after due consideration of the interests of both parties. For example, we must process certain data in order to be able to operate our website safely and economically.

 

Contact information for the Data Controller

For any questions you may have regarding data protection or the processing of your personal data, please find our contact information below:

 

Publicis Media GmbH

Toulouser Allee 1, 40211 Düsseldorf, Germany

Authorized to represent: Olivier Korte

E-mail: info@publicismedia.de

Phone: +49 211 17540 7

Imprint: https://www.publicismedia.de/impressum/

 

Contact information for the Data Protection Officer

Publicis Lion GmbH, Division Resources Germany

Yusuf Tuncay-Eberl

Toulouser Allee 3, 40211 Düsseldorf, Germany

E-mail: yusuf.tuncay-eberl@publicisresources.com

 

Storage period

We erase personal data as soon as the reason for the processing of this data has ceased to exist. In some cases, we have a legal obligation to continue to store specific data after the original purpose for the processing thereof has ceased to exist. If you would like to request the erasure of your data or wish to withdraw your consent, your data will be deleted, provided that we are under no obligation to store this data.

 

Data transfer to Third Countries

We only transfer data to or process it in countries outside of the EU/EEA (Third Countries) if you have agreed to this processing, if this is required by law or if this is contractually necessary and, in all cases, only to the extent that is generally permitted. The processing of personal data in Third Countries such as the USA, where many service providers’ servers are located, may mean that personal data is processed and stored within this Third Country.

 

Therefore, we expressly draw your attention to the fact that, according to the European Court of Justice, there is currently no adequate level of data protection for data transfers to the USA. Data processing by US services (such as Google) may mean that data is not processed and stored anonymously. Furthermore, US government authorities may have access to individual data. In addition, collected data may be able to be linked to data from other services provided by the same provider if you have a corresponding user account.

 

Data processing security

In order to protect personal data, we have put in place both technicaland organisational measures. In so far as is technically possible and appropriate, we carry out encryption or pseudonymisation of personal data. Despite all these measures, one hundred percent security is not possible, even by objective standards.

 

Cookies

Our website uses HTTP cookies to store user-specific data. Here: link you will find our explanation as to what cookies are and why they are used.

 

Introduction to web hosting

When you visit websites, some data, including personal data, is automatically created and stored. The same applies when you visit our website. 

 

In order to display the website, the browser must connect to another computer – the so-called web server. The web server has a technically complex task. This is why, generally, this task is assigned to experienced providers. These providers provide web hosting services which ensure that website data is stored reliably and accurately. Whilst the browser is connecting to your computer (desktop, laptop, tablet or smartphone) and during the data transfer process to and from the web server, personal data may be processed.

On the one hand, your computer is storing data, and, on the other hand, the web server also needs to store data for a while to ensure proper operation. For this, we use www.webflow.com in the USA. For more information on this, please also consult the hosting provider's Privacy Policy below.

 

Web hosting provider (Webflow)

Below, you will find the contact information for our external hosting provider, where, in addition to the information provided above, you can find out more about data processing:

Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103. You can find out more about data processing with this provider here: https://webflow.com/legal/eu-privacy-policy

 

Web analytics (general)

On our website, we use software for analysing the behaviour of website visitors, known as web analytics or web analysis. For this, data is collected and then stored, managed and processed by the respective analytics tool provider (also known as the tracking tool).

Using browser add-ons to deactivate Google Analytics-JavaScript (ga.js, analytics.js, dc.js) prevents Google Analytics from using your data. You can download and install the browser add-on from: https://tools.google.com/dlpage/gaoptout?hl=de. Please make sure that when using this add-on only Google Analytics data collection has been deactivated.

The use of Google Analytics requires your consent which we obtain using our cookie pop-up. This consent, in accordance with Article 6 (1)(a) GDPR (consent), provides the legal basis for the processing of personal data which may occur when collected by web analytics tools. In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors. By using Google Analytics, we are able to identify website errors and attacks and improve profitability. The legal basis for this is Article 6 (1)(f) GDPR (legitimate interests). However, we will only use Google Analytics if you have given your consent.

If you would like to find out more about the tracking service, we recommend consulting the following links: https://marketingplatform.google.com/about/analytics/terms/de/and https://support.google.com/analytics/answer/6004245?hl=de.

 

Google Analytics (G4)

On our website, we use the analytics tracking tool called Google Analytics

(G4) from the US-based company Google Inc.

For Europe, the company responsible for all Google services is Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland). Google Analytics collects data regarding your actions on our website. For example, if you click on a link, this action will be saved as a cookie and sent to Google Analytics. By using the reports that we obtain from Google Analytics, we are able to better adapt our website and services to your needs. Below, you will find more details regarding the tracking tool and information about what data is stored and how you can prevent this.

Using browser add-ons to deactivate Google Analytics-JavaScript (ga.js, analytics.js, dc.js) prevents Google Analytics from using your data. You can download and install the browser add-on from:https://tools.google.com/dlpage/gaoptout?hl=de. Please make sure that when using this add-on only Google Analytics data collection has been deactivated.

https://tools.google.com/dlpage/gaoptout?hl=de runterladen und installieren. Beachten Sie bitte, dass durch dieses Add-on nur die Datenerhebung durch Google Analytics deaktiviert wird.

The use of Google Analytics requires your consent which we obtain using our cookie pop-up. This consent, in accordance with Article 6 (1)(a) GDPR (consent), provides the legal basis for the processing of personal data which may occur when collected by web analytics tools. In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors. By using Google Analytics, we are able to identify website errors and attacks and improve profitability. The legal basis for this is Article 6 (1)(f) GDPR (legitimate interests). However, we will only use Google Analytics if you have given your consent.

Google processes your data in countries including the USA. This may pose various risks to the lawfulness and security of data processing. As the basis for data processing by recipients based in Third Counties (outside of the European Union, Iceland, Liechtenstein and Norway and, therefore, including in the USA) or the communication of data to a Third Country, Google uses so-called standard contractual clauses (Article 46 (2) and (3) GDPR). Within the framework of these clauses, Google undertakes to comply with the European level of data protection when processing your data, even if the data is stored, processed and managed in the USA. 

If you would like to find out more about the tracking service, we recommend consulting the following links: https://marketingplatform.google.com/about/analytics/terms/de/ and 

https://support.google.com/analytics/answer/9019185?hl=de#IP&zippy=%2Cthemen-in-diesem-artikel

 

Google Analytics IP Anonymization

On our website, we have implemented IP Anonymization from Google Analytics (G4). This function has been developed by Google so that this website can comply with the applicable data protection provisions and recommendations issued by the local data protection authorities in the event that these authorities prohibit the storing of full IP addresses. IP anonymization or masking is a default setting and cannot be set to visible or “unmasked”. Therefore, IP addresses are neither recorded nor stored.

You can find out more information regarding IP anonymizationhere: https://support.google.com/analytics/answer/2763052

 

Google Tag Manager

Google Tag Manager is a solution that enables us to manage so-called website tags via an interface (and thus, for example, integrate Google Analytics and other Google marketing services with our online offer). The Tag Manager itself (which implements the tags) does not process any of the user’s personal data. With regard to the processing of users’ personal data, please consult the following information on Google services.

 Use Policy: https://www.google.com/intl/de/tagmanager/use-policy.html.

 

Hotjar

We use Hotjar on our web presence. This is a web analytics service provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, hereinafter referred to as “Hotjar”. Hotjar enables us to analyse the user behaviour of our web presence.

By using Hotjar, we are able to record and analyse user behaviour on our web presence such as your mouse movements or clicks. For this, your visit to our web presence is anonymised. In addition, Hotjar enables information regarding your operating system, your internet browser, incoming or outgoing navigation (“links”) and the geographical origin, type and trigger of the end device you are using to be analysed and processed for statistical purposes. Similarly, Hotjar is able to collect direct feedback from you.

In addition to the foregoing, Hotjar provides further information regarding data protection which can be found here: https://www.hotjar.com/privacy. Furthermore, you have the option of stopping your user behaviour from being analysed by opting out. By confirming using this link: https://www.hotjar.com/opt-out a cookie will be stored on your internet browser preventing further analysis.

 

Messenger & communication (general)

On our website, we have options that allow you to communicate with us (including messenger and chat functions, online contact forms, email and telephone). Your data is processed and stored for this, and in so far as is necessary to respond to your request and for our subsequent actions. In addition to standard means of communication such as email, contact forms and telephone, we also use chats and messenger. The messenger application we are currently using is WhatsApp.

When contacting us, the user's details are processed for the purpose of handling the contact request and its processing pursuant to Art. 6 para. 1 lit. b.(in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f.(other requests) DSGVO. The user's details may be stored in a customer relationship management system ("CRM system") or comparable systems. We currently use the following system of HubSpot Inc. USA.

We delete the inquiries if they are no longer required, provided that no legal archiving obligations prevent the deletion.

HubSpot

We use HubSpot, a digital marketing system, on our website. The service provider is the American company HubSpot, Inc, 25First St 2nd Floor Cambridge, MA, USA. The company also has a registered office in Ireland, among other places, with the address 1 Sir John Rogerson's Quay, Dublin2, Ireland.

HubSpot also processes your data in the USA, among other places. We would like to point out that there is currently an adequate level of protection for data transfers to the USA through the new "EU-US Data Privacy Framework". As a basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, HubSpot additionally uses so-called standard contractual clauses (Art. 46. para. 2 and 3 DSGVO).

Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA).

Through these clauses and the EU-US Data Privacy Framework, HubSpot undertakes to comply with the European level of data protection when processing your data, even if the data is stored, processed and managed in the USA.

The Data Processing Agreement, which complies with the standard contractual clauses, can be found at https://legal.hubspot.com/dpa.

To learn more about the data processed through the use of HubSpot, please see the Privacy Policy at https://legal.hubspot.com/de/privacy-policy .

Social media (general)

In addition to our website, we are also active on various social media platforms. This may involve the processing of user data so that we are able to reach users of interest to us via social media. Furthermore, we are also able to integrate elements from our social media platforms directly on our website. This is the case, for example, if you click on a so-called social media button on our website and are immediately redirected to our social media presence. 

All data that is collected via a social media platform is stored on the providers’ servers. Thus, only the providers have access to the data and are able to provide you with information or make changes.

If you would like exact information regarding what data is stored and processed by social media providers and how you can object to the processing of this data, please carefully consult the respective company’s privacy policy. Similarly, if you have questions concerning data storage and processing or would like to assert your right to information, we recommend that you contact the provider directly. Information regarding specific social media platforms has been provided below in so far as is possible.

 

Instagram

We have integrated Instagram functions on our website.

Instagram is a social media platform provided by the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Since 2012, Instagram has been a subsidiary company of Meta Platforms Inc. and is a Facebook product. Content from Instagram has been integrated on our website. This allows us to show you content from Instagram such as buttons, photos and videos directly on our website. When you access web pages on our web presence which integrate an Instagram function, data will be transferred to, stored and processed by Instagram. Instagram uses the same systems and technology as Facebook. Therefore, your data will be processed across all Facebook companies.

By integrating Instagram functions, we are able to enrich our content with content from the Instagram world.  Instagram also uses the collected data for measurement and analysis purposes. We only receive aggregated and anonymised data.

Instagram shares the collected data between Facebook companies, with external partners and with individuals that you have connected with around the world. Data processing is carried out in compliance with the company's own Data Policy. Your data is distributed across Facebook servers around the world for reasons including security reasons. The majority of these servers are based in the USA. You can find out more information regarding Instagram’s Privacy Policy here: https://help.instagram.com/519522125107875.

 

LinkedIn

On our website, we use the conversion tracking tool known as LinkedIn Insight Tag. The service provider for this is the American company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For matters concerning data protection within the European Economic Area (EEA), the EU and Switzerland, the company responsible is LinkedIn Ireland Unlimited (Wilton Place, Dublin 2, Ireland). LinkedIn processes your data in countries including the USA. You can find out more information about this by consulting the following links:https://www.linkedin.com/help/linkedin/answer/a427660. You can find out more about how your data is processed by LinkedIn Insight Tag in the Privacy Policy which can be accessed here: https://de.linkedin.com/legal/privacy-policy

 

Cookie Consent Management Platform (general)

On our website, we use a Consent Management Platform (CMP) software, which makes it easier for us and you to ensure a proper and secure use of scripts and cookies. The software automatically creates a cookie pop-up, scans and monitors all scripts and cookies, provides you with the cookie consent option required under data protection law and helps us and you to maintain an overview of all cookies.

Within the framework of our Cookie Management Tools, you are able to manage each individual cookie yourself and have full control over the storing and processing of your data. Your declaration of consent is saved so that you are not asked again each time you visit our website and to ensure that, when required by law, we are able to provide evidence of your consent.

You have the right and the possibility to withdraw your consent to the use of cookies at any time. This can be carried out via our Cookie Management Tool, via the opt-out functions referred to in the relevant section of this Privacy Policy or via the browser you are using.

 

OneTrust (CMP)

On our website we use OneTrust, a privacy management tool. The service provider for this is the Italian company iubenda s.r.l., Via San Raffaele, 1 – 20121 Milan, Italy. You can find out more about how your data is processed by OneTrust in the Privacy Policy which can be accessed here: https://www.onetrust.com/privacy/.

 

Recruiting Tool (general)

Various companies provide software programmes that make the application process significantly more straightforward. The majority of these systems offer filter options which trawl through databases of potential candidates. This allows us to find employees that suit our company quickly and efficiently. Your personal data may be transferred, stored or managed through online forms and recruiting tools. This also refers, in addition to recruiting tools, to standard application processes by email or online forms. More information regarding the recruiting tool that we use can be found below.

For the purposes of finding suitable candidates and the administrative process for all application documents, we use, in compliance with all legal guidelines, a platform that is specialised in application management. So-called recruiting tools generally make the application process easier by carrying out many of the administrative tasks and optimising application processes. This allows us, in some cases, to find suitable employees for our company more quickly. Details regarding the conditions for the recruitment process can be found in the respective job advertisement.

If you apply for a position with us, you must provide data so that we are able to assess your application. The specific data you will have to share with us depends on the position being advertised and the information required for this. Generally, the data required includes your name, address, date of birth and proof of the qualifications required for the position. However, during the application process, in addition to the standard personal data such as name and address, you may be required to send other information regarding your health or ethnicity. This is to allow both us and you to assert our/your rights under employment law and in relation to social security and protection and, at the same time, to ensure that the associated obligations can be fulfilled. This data is referred to as special category data. When using the online form or recruiting tools, your data, i.e. your application, will be sent to us in encrypted form. You also have the option of sending your application via email.

In the event of a successful application, the data you have sent to us may be further processed for employment purposes. If an application does not meet our requirements, we will delete the data that has been collected. Similarly, if you withdraw your application, your data will also be deleted. If you agree to be included in our applicant pool, we will store the data that has been collected for this purpose until you withdraw from the applicant pool. To withdraw from the applicant pool, the same rules apply as for the withdrawal of your consent.

You have the right and the possibility to withdraw your consent at any time. In order for us to be able to respond to any questions regarding applications and to fulfil our obligation to provide proof, data will be deleted after six months at the latest. Invoices for travel cost reimbursement will be archived by us due to tax law requirements.

Your agreement to be included in our applicant pool is voluntary and has no influence over the application process. You have the possibility to withdraw your consent at any time.

 

SmartRecruiters

We use SmartRecruiters which is an application management software. The service provider for this is the Austrian company SmartRecruiters GmbH Wilhelmstraße 118; 10963 Berlin. You can find out more about how your data is processed by SmartRecruiters in the Privacy Policy which can be accessed here: https://www.smartrecruiters.com/de/legal/general-privacy-policy/

 

Actuality of the privacy policy 14.09.2023