Privacy Policy


Privacy policy

Thank you for visiting our website and for your interest in our company. The protection of your data is important to us, which is why we comply with the provisions of the EU GDPR, the BDSG (Bundesdatenschutzgesetz) and other national data protection regulations.

We would therefore like to inform you below about the processing of your personal data.

Data protection at a glance

Who is responsible for data collection on this website?

The controller for data processing on this website is:

Mediatis AG
Münchener Str. 45
60329 Frankfurt

Phone: +49 69 271388-0
Email: info@mediatis.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, restriction or deletion of this data.

You can contact our data protection officer at any time if you have further questions on the subject of data protection. You can reach him at datenschutz@mediatis.de.

You also have the right to lodge a complaint with the competent supervisory authority.

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following supervisory authority is responsible at our company headquarters
The Hessian Commissioner for Data Protection and Freedom of Information, represented by Prof. Dr. Alexander Roßnagel, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Telephone: 0611-1408 0, Email: poststelle@datenschutz.hessen.de.

A list of the other supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Information, restriction, deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction, restriction or deletion of this data at any time. You can contact us at any time at datenschutz@mediatis.de or by post at the address given in the legal notice if you have any further questions on the subject of personal data.

Objection and revocation

Withdraw of consent

If the processing of your personal data is based on consent, this consent can be withdrawn at any time with effect for the future. No disadvantages arise from the revocation. The revocation must be sent in writing to datenschutz@mediatis.de, stating which consent you are revoking. You can make changes to your consent in relation to the cookie selection in the consent banner independently at any time under "Cookie settings".

Right to object pursuant to Art. 21 GDPR

If your personal data is processed to protect legitimate interests within the meaning of Art. 6 para. 1 lit. e or f GDPR, you have the right under Art. 21 GDPR to object to this processing on grounds relating to your particular situation. You can object to processing for the purposes of direct marketing at any time with effect for the future without giving reasons in accordance with Art. 21 para. 2 GDPR. To exercise your right to object, simply send an informal message to datenschutz@mediatis.de stating which data processing you object to.

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails..

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data collection on our website

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The data is required to combat cases of abuse, to eliminate and analyze malfunctions and to ensure the highest possible compatibility with different browsers and browser versions. In addition, the data is used to enable the best possible presentation of the content and to optimize the presentation of this content. The basis for data processing is our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Contact form

You have the option of contacting us via our contact form. We ask for your first name and surname, your e-mail address, your request (via dropdown) and optionally the message you are writing. If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Applications

On our website you will find our current vacancies for which you can apply. However, we would also like to inform you here about how we process your personal data in the context of unsolicited applications.

We process data in connection with your application. This may be general personal data (such as name, address and contact details), information about your professional qualifications and schooling or information about further professional training or other information that you provide to us in connection with your application. We only process your personal data for the purpose of employment or the application process. If you apply to us or provide us with your contact details for the purpose of contacting you, we will use your data for internal review or to contact you. Technical and organizational measures are taken to protect your data against accidental or intentional manipulation and unauthorized access.

If you are hired, we will use your data to fulfill the legal requirements and thus establish the employment relationship. If you leave the company, your data will be used to process your departure. This may be due to termination of employment or retirement age.

If you have applied to us, your application documents will remain internal. The documents will only be forwarded to the responsible employees for coordination purposes. In the event of employment or resignation, your data will be forwarded to the institutions so that the process runs smoothly. These are, for example, the legally required institutions such as health insurance, pension insurance, tax office, tax consultant, etc.

Your data will not be forwarded to a third country. Third countries are countries that do not belong to the EU.

In the course of the application process, we process your data in accordance with Art. 6 para. 1 lit. b GDPR, as part of a contract initiation. If the processing of your personal data pursuant to Art. 6 para. 1 lit. a GDPR is based on consent, we will obtain this separately from you. For example, if we are allowed to contact you again at a later date following a rejection.

Furthermore, we may process personal data about you if this is necessary to defend against legal claims asserted against us in the application process. The legal basis for this is Art. 6 para. 1 lit. f GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

We only store your data for as long as required for the above-mentioned purposes. If one or more purposes cease to apply, your data will be deleted unless statutory retention periods prevent deletion. Once the deadlines have expired, your data will be deleted. If you are not considered in the further application process, your application documents will be deleted after a period of 6 months. This does not apply if you have given us your consent to store your data for longer than is required by law.

Analysis tools, third-party tools, cookies

Analysis tools

When you visit our website, your surfing behavior may be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this is described in this privacy policy.

Cookies

The website partly uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Consent Banner

Google Tag Manager

This website uses the "Google Tag Manager" service from Google Inc (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). The Tag Manager is a tool for managing so-called tags, which are used for tracking in online marketing.

The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses.

However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. There is a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG (Telecommunications Digital Services Data Protection Act), insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which guarantees compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list.

Further information on the Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Analytics 4 with anonymization function

We have integrated the Google Analytics 4 component (with anonymization function) on this website. Google Analytics 4 is a web analysis service. Web analysis is the collection, gathering and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The special feature of Google Analytics 4 is that no masking of IP addresses is required, as the IP addresses are neither logged nor stored. ist die Besonderheit, dass keine Maskierung von IP-Adressen erforderlich ist, da die IP-Adressen weder protokolliert noch gespeichert werden.

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website and to provide other services related to the use of our website.

Google Analytics 4 places a cookie on your end device. By setting the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of our website is accessed, which is operated by us and on which a Google Analytics component has been integrated, the Internet browser on the end device of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data that Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.

The cookie is used to store the following personal information:

  • City
  • Latitude (of the city)
  • Longitude (of the city)
  • Secondary version of the browser
  • User agent string of the browser
  • Device brand
  • Device model
  • Device name
  • Minor version of the operating system
  • Secondary version of the platform
  • Screen resolution

Each time you visit our website, this personal data is transferred to Google in the USA. This personal data is stored by Google in the USA. Google may pass on this personal data collected via the technical process to third parties.

This processing is based on your consent in accordance with Art. 49 para. 1 lit. a GDPR i.V.m. § 25 para. 1 TDDDG on your consent. This is obtained via the consent banner. You have the option to change your selection at any time under the cookie settings.

The user's personal data will be deleted after 2 months.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject's device. In addition, a cookie set by Google Analytics 4 can be deleted at any time via the Internet browser or other software programs.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which guarantees compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list.

Further information on the Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Adwords Conversion Tracking

We use Google Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you. This is a service provided by Google Inc (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). Google Adwords places a cookie on your computer if you have reached our website via a Google ad.

These cookies lose their validity after 3 months and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each Adwords customer receives a different cookie. Cookies can therefore not be tracked via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

The legal basis for the processing is your consent in accordance with Art. 49 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TTDSG. If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this - for example, by using a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy on conversion tracking can be found at the following link: https://services.google.com/sitestats/de.html

In addition, you have the option of making the settings via our cookie settings.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list.

Further information on the Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Maps

This website uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. We have no influence on this data transfer. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. The processing is based on your consent pursuant to Art. 49 para. 1 lit. a GDPR i.V.m. § 25 para. 1 TTDSG. You have the option of making changes to your settings via our cookie settings.

You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which guarantees compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards.

Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list.

In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use policies.google.com/terms and the Terms and Conditions for Google Maps www.google.com/intl/de_de/help/terms_maps.html.

In addition, Google also offers adssettings.google.com/authenticated for further information.

General information on data transfer to the USA and other third countries

Among other things, we use services from companies based in the USA or other countries. Third countries that are not secure under data protection law. If these services are active, your personal data is transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.

For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

You can find more information about Google's privacy policy at: https://policies.google.com/privacy?hl=en-US.

Data security and data protection, communication by e-mail

BWhen you contact us by email, your email signature is one of the ways in which personal data is processed. As a rule, your name, address, e-mail address, telephone number, date and time are recorded.

We need to collect this data in order to process your request. The legal basis for processing the data is the legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Your data is protected by technical and organizational measures; this applies to collection, storage and processing so that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or sending information by post if it requires a high level of confidentiality.

In principle, no personal data is transferred to a third country. However, we use Microsoft services (Temas, Outlook) for communication purposes. A transfer can therefore not be completely ruled out. Microsoft is subject to the EU standard contractual clauses. However, a transfer to the USA cannot be completely ruled out. You can find more information about Microsoft at: https://privacy.microsoft.com/de-de/privacystatement or https://www.microsoft.com/de-de/trust-center/privacy/gdpr-faqs?market=de.

Updating the privacy policy

We reserve the right to adapt this privacy policy so that it complies with the current and latest legal requirements or to change it if, for example, new services are introduced.