Privacy Policy
1. Responsible party
The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
MIAVIT GmbH („we“/“us“)
Robert-Bosch-Straße 3
49632 Essen (Oldb.)
Phone: +49 5434 82-0
Mail:
Data Protection Officer
We have appointed a data protection officer.
Mail:
2. Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the external provider. This may include all data described in this privacy policy.
External hosting is carried out by a professional provider in the interests of secure, fast, and efficient provision of our online services.
Our provider will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
We use the following provider:
MTS Systemhaus GmbH
Hinter dem Turme 7
38114 Braunschweig
Germany
Phone: 0531 - 252525
Mail:
Website: https://www.mts.de
We have concluded a contract for order processing (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. Data collection on this website
Server-Log-Data
The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us when you visit our website. This includes:
- IP address of the requesting computerDate and time of access
- Name and URL of the file accessed
- Amount of data transferred
- Access status (file transferred, file not found, etc.)
- Identification data of the browser and operating system used
- Name of the user's Internet access provider
- Website from which access is made (referrer URL)
- This data is not merged with other data sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website and in the ability to investigate cases of misuse—for this purpose, the server log files must be collected and stored for a period of fourteen days.
4. Cookies and other technologies
Our website uses so-called “cookies” and other technologies. Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them and certain content could not be provided in the desired manner. Other cookies are used to evaluate user behavior or display advertising. These cookies are not technically necessary cookies.
Cookies that are necessary for the electronic communication process or to provide certain functions you have requested (necessary cookies) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. We have a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of our services.
We may only use cookies that are not technically necessary if you have consented to their use. If you have given us your consent to store cookies and similar recognition technologies, processing will be carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG); Consent is voluntary and can be revoked at any time.
If cookies from third-party companies or for analysis purposes are used, we will inform you separately in this privacy policy and, if necessary, request your consent.
4.1 Matomo
We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. The software places a cookie on the user's computer. This is a non-essential cookie, which is why we only set it if you have given us your consent in accordance with § 25 (1) TDDDG.
When individual pages of our website are accessed, the following data is stored with the help of the cookie:
- Two bytes of the IP address of the user's calling system
- The website accessed
- The website from which the user accessed the accessed website (referrer)
- The subpages accessed from the accessed website
- The length of time spent on the website
- The frequency with which the website is accessed
The software runs exclusively on our website's servers. Users' personal data is only stored there. The data is not passed on to third parties.
The software is set up so that IP addresses are not stored in full, but rather 2 bytes of the IP address are masked (e.g., 123.456.xxx.xxx). This makes it impossible to assign the truncated IP address to the requesting computer.
The legal basis for processing your personal data for the purpose of analyzing surfing behavior is your consent in accordance with Art. 6 (1) (a) GDPR.
By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, the interests of users in the protection of their personal data are sufficiently taken into account.
The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is after 2 years.
4.2 Google
4.2.1 General information and third-country transfers
We use various services provided by the third-party provider Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (“Google”) on our website.
Google's privacy policy can be found at: http://www.google.de/intl/de/policies/privacy.
There you will also find further information about your rights in this regard and settings options for protecting your privacy.
We always use Google services in what is known as basic consent mode. This means that we do not transfer any personal data to Google or set cookies unless you have given us your consent in accordance with Section 25 (1) sentence 1 TDDDG and Art. 6 (1) lit. a GDPR. You can revoke your consent at any time.
To exercise your right of withdrawal, please deactivate the corresponding service via the “cookie banner” provided on our website.
By consenting to the processing or setting of cookies in connection with Google's services, you grant both us and Google consent to process your data and set cookies for the purposes specified here. Further information on the respective Google services can be found in the following sections.
The European Commission adopted its adequacy decision for the US on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and transfer to third countries (e.g., Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.
4.2.2 Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google, on our website to analyze your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, which is truncated by Google to exclude any direct personal references.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics and shortened is not merged with other Google data. The data collected within the scope of Google Analytics 4 is stored for a period of two months and then deleted.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service via the “cookie banner” provided on our website. Alternatively, you can download a browser add-on HERE to deactivate Google Analytics 4.
Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.
4.2.3 YouTube
We embed videos from YouTube on our website. Google operates these pages.
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily prevent data from being passed on to YouTube partners. YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
To counter this risk, we use the so-called “two-click solution.” This means that you can only watch a YouTube video once you click on it and thus actively consent to the data transfer described above.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube may store various cookies on your device after you start a video or use comparable recognition technologies (e.g., device fingerprinting). This allows YouTube to obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts.
After starting a YouTube video, further data processing operations may be triggered over which we have no control.
YouTube is integrated in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If you play the video, you give your consent on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Your consent can be revoked at any time.
Further information on data protection at YouTube can be found in Google's privacy policy at: https://policies.google.com/privacy?hl=de.
4.2.4 Google Fonts (local hosting)
We use Google Fonts, which are provided by Google, on our website to ensure uniform font display. Google Fonts are installed locally. There is no connection to Google servers and no transfer of your data.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.
4.2.5 Google reCAPTCHA
We use Google reCAPTCHA in some input forms on our websites (e.g., newsletter registration). Google reCAPTCHA is a security plug-in provided by Google that helps protect your data and our websites from spam and abusive activity by determining whether the user is a human or a bot.
ReCAPTCHA ensures the integrity and functionality of our systems by defending against spam, DDoS attacks, and similar automated malicious attacks. To this end, reCAPTCHA uses advanced risk analysis techniques to distinguish humans from bots. To perform the necessary analysis, reCAPTCHA evaluates various information:
- IP address
- the website from which an accessing system reaches our website (so-called referrer)
- Information about the operating system
- The length of time the visitor stays on the website
- The date and time of access to the website
- Browser types and versions used
- The user's mouse movements in the reCAPTCHA checkbox area (“I am not a robot”)
The data collected as part of the analysis may be transferred to Google servers in the United States. If reCAPTCHA transmits your IP address, it will not be merged with other Google data unless you are logged into your Google account at the time of using the reCAPTCHA plugin. You can prevent Google from transferring and storing data about you and your behavior on our website by logging out of Google before visiting our website or using the reCAPTCHA plugin.
For the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights in this regard and options for protecting your privacy, please refer to Google's privacy policy at http://www.google.de/intl/de/privacy.
Further information about Google reCAPTCHA can be found at https://www.google.com/recaptcha/about/.
4.3 Meta Pixel
We use Meta Pixel to measure conversions. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”). However, according to Meta, the data collected is also transferred to the USA and other third countries.
With the help of the Meta Pixel, Meta is able to identify you as a visitor to our online offering as a target group for the display of advertisements (so-called “social media ads”).
Accordingly, we use the Meta pixel to display the social media ads we place only to those Meta users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics, which are determined based on the websites visited) that we transmit to Meta (so-called “custom audiences”). With the help of the Meta pixel, we also want to ensure that our social media ads correspond to the potential interests of users and do not appear intrusive. With the help of the Meta pixel, we can further track the effectiveness of Meta ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Meta ad (so-called “conversion”).
If you are logged in to Meta (formerly Facebook) with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us, meaning we cannot draw any conclusions about the identity of users. However, this data can be linked to your user account by Meta. If you have a user account with Meta and are registered, Meta can assign the visit to your user account.
The legal basis for processing by the Meta pixel is your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) (1) TDDDG. We only use the Meta Pixel if you expressly consent to this. If you have consented to the use of the Meta Pixel, you can revoke your consent at any time. To do so, you can deactivate the Meta Pixel at any time by updating your Facebook account settings or your cookie settings.
4.4 Font Awesome (local hosting)
We use Font Awesome fonts on our website to ensure a consistent appearance. Font Awesome is installed locally. There is no connection to Fonticons, Inc. servers and no transfer of your data.
For more information about Font Awesome, please refer to the Font Awesome privacy policy at: https://fontawesome.com/privacy.
4.5 Spotify Pixel
We have integrated the Spotify Pixel from the music service Spotify into our website. The provider is Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.
The Spotify Pixel enables us to track and analyze user behavior on our website. We use this service to process the technical connection data of your server access and data for the creation of usage statistics. This processing enables us to deliver content efficiently and improve your user experience.
The data is also stored and processed by Spotify AB, which may enable a connection to your Spotify user profile and allow Spotify to use the data for its own services and advertising purposes, in accordance with Spotify's privacy policy. As the website operator, we have no influence over Spotify's use of the data.
The legal basis for the processing is your consent in accordance with Art. 6 (1) (a) GDPR, which you can give via our cookie banner and revoke at any time with effect for the future.
4.6 Adobe Publish Online
We embed files on our website using the Adobe Publish Online feature. Publish Online is a service for publishing documents provided by Adobe Systems Software Ireland Ltd. 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (“Adobe”), which is part of a group of companies headquartered in the USA. In order for the created documents to be displayed, your web browser must connect to an Adobe server in the United States, Europe, or the Asia-Pacific region and access the respective page. This provides Adobe with information that this website has been accessed from the IP address of your device.
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
We use the Publish Online function with the “View Now” option. This means that you will initially only see a preview image of the embedded file. You can only view the document in full after clicking on the “View Now” link above the document. Only then will your personal data be transmitted to Adobe.
Data transfer to the USA
When this tool is active, your personal data may be transferred to the US and processed there. Adobe relies on the EU Standard Contractual Clauses for this transfer of personal data from controllers in the EU. However, we would like to point out that the data protection supervisory authorities and the EU Commission currently classify the US as a country in which a level of data protection comparable to that in the EU cannot be guaranteed. For example, US companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g., intelligence services) may process, evaluate, and permanently store your data located on US servers for surveillance purposes, and that you may have no legal recourse against this. We have no influence on these processing activities.
Order processing
In connection with the use of the Publish Online function, Adobe acts as a processor for us, which is why we have concluded a data processing agreement (DPA) with Adobe.
For more information on data protection, please visit: https://www.adobe.com/de/privacy.html
5. Contact
5.1 Contact formular
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) lit. b GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.
5.2 Request by email or telephone
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry, email address, or telephone/fax number), will be stored and processed by us for the purpose of processing your request. We will not disclose this data without your consent.
This data is processed on the basis of Art. 6 (1) lit. b GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.
The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
6. Handling applicant data
We offer you the opportunity to apply for a position with us (e.g., by email, post, or via our online application form). We provide information about the scope, purpose, and use of your personal data collected during the application process in our privacy policy for applicants, which you can view here.
Generell information
When you apply to us via our careers page, by email, or by post, we collect personal data. This includes, in particular, your contact details (such as first and last name, telephone number, and email address) as well as other data you provide about your career (e.g., resume, qualifications, degrees, and professional experience) and yourself (e.g., cover letter, personal interests). This may also include special categories of personal data (e.g., information about a severe disability).
Your personal data is usually collected directly from you as part of the application process. Social career networks (LinkedIn) may also be considered if you draw our attention to your profile or send us your application via LinkedIn.
The primary legal basis for the processing of your personal data from the application is Art. 6 (1) b GDPR (contractual or pre-contractual measures). In addition, consent pursuant to Art. 6 (1) (a) and Art. 7 GDPR in conjunction with Section 26 (2) BDSG may serve as a legal basis if you voluntarily provide us with information that is not strictly necessary for the application process. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future.
Application management with Personio and recipients
For the purpose of application management, we have integrated so-called “iFrames” from Personio into our website. Personio is an application from Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany, which is used for application and personnel management. We use it in connection with application procedures to optimize applicant management. Personio also enables us to create and evaluate job advertisements. We have concluded a contract with Personio for order processing, in which we oblige Personio to protect our customers' data and not to pass it on to third parties.
Your personal data will only be passed on within our company to persons who are involved in processing your application and deciding whether to offer you a position. These are the personnel department and the responsible persons within the department in which the vacant position is to be filled.
If you apply for open positions at one of Miavit's other locations, your application will be forwarded there.
Your data will be transferred to recipients outside the EU/EEA if you apply for open positions at our locations in Turkey or Vietnam.
Deletion periods
If your application is successful, the data you submit will be stored in our data processing systems for the purpose of implementing the employment relationship on the basis of Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) of the GDPR.
If your application is unsuccessful, you decline a job offer, or you withdraw your application, your data will be stored for up to 6 months after the decision on the establishment of an employment relationship. The data will then be deleted and the physical application documents destroyed.
The storage serves in particular for verification purposes in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Beyond this period, your data will only be stored by us if you have given us your consent to do so (e.g., for inclusion in a talent pool). Giving your consent is voluntary and is not related to the current application process. In particular, you will not suffer any disadvantages if you do not wish to be included in the applicant pool.
You can revoke your consent at any time without giving reasons. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
7. Own services
7.1 Newsletter
You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to us:
- First and last name
- Email address
- Date of birth (optional)
In addition, the following data is collected during registration:
IP address of the accessing computer For the processing of the data, your consent is obtained during the registration process
and reference is made to this privacy policy. After registering for the newsletter, you will receive an email to the email address you provided, asking you to confirm your registration (known as a “double opt-in”). The legal basis for processing the data after registering for the newsletter is your consent in accordance with Art. 6 (1) (a) GDPR.
Your email address is collected for the purpose of sending you the newsletter, and your name is collected so that we can address you correctly. The optional information is used to make the newsletter even more appealing and relevant to you. The collection of further personal data during the registration process serves to prevent misuse of the services or the email address used. Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. Your email address and the other data you have provided will therefore be stored for as long as your subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of 365 days. You can cancel your subscription to the newsletter at any time. For this purpose, there is a corresponding link in every newsletter. This also allows you to revoke your consent to the storage of the personal data collected during the registration process.
Order processing
In connection with data processing for the dispatch of newsletters, data is transferred to our service provider CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. We have concluded an order processing agreement with this service provider and the data will be used exclusively for sending the newsletter and processed in accordance with our instructions. Your personal data will not be transferred to third countries in connection with the sending of the newsletter.
8. Your rights
You have the following rights with regard to your personal data:
Right to information (Art. 15 GDPR)
You have the right to obtain information about the points specified in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.
Right to withdraw your consent to data processing (Art. 7 GDPR)
If the processing of your data is based on your consent, you have the right to withdraw this consent at any time in accordance with Art. 7 (3) GDPR. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent in writing or by email.Recht auf Berichtigung oder Löschung (Art. 16 und 17 DSGVO)
You have the right to have inaccurate personal data concerning you corrected. In addition, you have the right to request the deletion of your personal data if further processing is no longer necessary, if the processing is unlawful, or if you have revoked your consent to such processing.
Right to restriction of processing (Art. 18 GDPR)
If the conditions set out in Article 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.
Right to data portability (Art. 20 GDPR)
Within the limits of Article 20 GDPR, you have the right to receive your personal data in a machine-readable format so that you can forward it to another controller or have it forwarded.
Right to lodge a complaint
You also have the right to lodge a complaint with a supervisory authority.
Right to object to processing (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
To assert your rights, please contact us using the contact details provided in our legal notice.
The assertion of these rights is free of charge.