What are Personal Data?
“Personal data” are any information relating to an identified or identifiable individual person, such as a person’s name or also their hobbies.
“Processing” of data means any operation or set of operations carried out with or without the aid of automated processes relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or integration, limitation, erasure or destruction.
The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation”, GDPR), as well as in the Federal Data Protection Act (BDSG) and Telemedia Act (TMG).
The controller of your data is:
OmniSavy UG (haftungsbeschränkt)
c/o Digitales Gründerzentrum Alte Schlosserei, Werkstr. 2, 63739 Aschaffenburg
registered with the local court (Amtsgericht) of Aschaffenburg under HRB 15346
represented by the managing directors Sergio Gerardo Chávez Mercado and Victoria Navarro Franco
phone: +49 (0) 6021 373 8891
Controller is any natural or business person, which decides on the purpose and means of data processing on its own or jointly with others.
Scope of Data Processing
The controller named above as well as its external service partners process your data for the purpose of providing the website and its services, including providing hard- and software through such external service partners. You provide data if this is necessary for the aforementioned purposes.
The controller processes contact information, usage data or other information that you provide to us.
We process your personal data for the following purposes:
Communication or storage/processing of data in order to establish, execute and/or process a contractual relationship (also verbally) with you (legal basis: Art. 6 para. (1) s.1 lit. b. GDPR);
Compliance with legal obligations (e.g. commercial or tax retention obligations) (legal basis: Art. 6 para. (1) s.1 lit. c. GDPR);
Assertion, exercise and defence of legal claims (legal basis: Art. 6 para. (1) s.1 lit. f. GDPR), whereby our legitimate interest lies in the assertion of legal claims and defence in legal disputes;
With your consent for the purposes mentioned when granting it (legal basis: Art. 6 para. (1) s.1 lit. a. GDPR or Art. 9 para. (2) s.1 lit. a. GDPR for special categories of personal data); or
For more information please refer to email@example.com.
In the event you refrain from providing such data you may face legal disadvantages, for example, limited or no possibility of using the Website or no answer to your email send to us.
Data Processing outside the EU
Your personal data are processed in and outside the EU, whereas data protection standards applicable in the EU are ensured.
For the Website we use the hosting provider Wix by Wix.com Luxembourg S.a.r.l, 5, rue Guillaume Kroll, L-1882 Luxembourg and affiliated companies (more information: https://de.wix.com/about/privacy-dpa-users). Such provider may process your data in and outside the EU, whereas for data processing outside the EU such provider will comply with applicable safeguards to guarantee data protection standards applicable in the EU.
We also use Google cloud services, whereas data are processed on servers in the EU/EEA (more information: https://cloud.google.com/terms/data-processing-terms).
Furthermore, the providers of Social Media and our engaged IT services process data outside the EU. For details please refer to “Participation in Mexican Professional Program; Registration on the Website” and “Data Processing on our Social-Media-Pages” below.
You have the following rights:
the right of access,
the right to rectification or deletion,
the right to restriction of processing,
the right to data portability,
the right to withdraw a consent given by you.
You also have the right, for reasons related to your particular situation, to object at any time to the processing of your personal data pursuant to Art. 6 para. (1) s.1 lit. e or f GDPR; this also applies to profiling based on these provisions.
To exercise these above mentioned rights you can contact firstname.lastname@example.org.
You or the person affected have also the right to lodge a complaint with a supervisory authority at your choice (for example: Bayerischer Landesbeauftragter für den Datenschutz, Postfach 22 12 19, 80502 Munich/Germany or via the online form: https://www.datenschutz-bayern.de/service/complaint.html).
Storing and Deleting Data
The data are deleted if you withdraw your consent and/or such data are no longer necessary for the purpose of processing. The log files and IP addresses of website visitors, which are processed as described below, are deleted within 14 days. We or the engaged third party services delete your data according to the following criteria: Time and completion of requests, settings provided by third party providers etc. Furthermore, your data are stored if we are obliged to do so in accordance with legal retention periods (e.g. German Commercial Code (HGB) or German Fiscal Code (AO)).
For a best possible security of user data the service through the Website or Social-Media-Page is provided via a secured SSL connection between your server and the browser. That means that the data shall be transferred in encrypted form.
For further information you may contact us any time, for example via email to email@example.com.
DATA PROCESSING ON OUR WEBSITE
Visiting the Website
The controller named above (or the webspace provider) collect data on each visit to the Website (so-called server log files), which include:
name of the Website visited, file, date and time of the visit, data amount transferred, information on a successful call, browser type as well as version, operating system of the user, referrer URL (the page visited before), IP address and the requesting provider
as well as the following, if a mobile end device is being used:
country code, language, name of device, name of operating system and version
Theses server log files are only used for statistical evaluations for the purpose of optimizing the services and in order to guarantee the stability and operational security of the Website. When personal data (such as the IP-address) are stored the legal basis for this is Art. 6 para. (1) s.1 lit. c. GDPR or Art. 6 para. (1) s.1 lit. f. GDPR based on our legitimate interest of fraud prevention and quality assurance.
Online Contact Form or other Contact
If you send any requests via the online contact form or send an email or otherwise contact us your details in an online form or request, including the contact data, name, email address and other data provided respectively, are processed in order to deal with your inquiry or to be able to contact you at a later time for follow up questions. These data are processed only on the basis of your consent (legal basis Art. 6 para. (1) s.1 lit. a. GDPR) or on the basis of an initiating or existing business relationship (legal basis Art. 6 para. (1) s.1 lit. b. GDPR).
The Website partly uses so-called cookies. Cookies do not cause any harm to your device and do not contain any viruses. Cookies serve the purpose of making the service more user-friendly, more effective and safer. Cookies are small text files which are stored on your device and in your browser.
Most of the cookies used on this Website are so-called session cookies. After the end of the session these cookies will be deleted automatically. The session cookies are used in order to associate successive page requests with the individual users, who at the same time access the Website. Other cookies will be stored on your device until you delete them. These cookies enable the controller to recognize your browser during your next visit.
You can adjust your browser to notify you, before you receive a cookie or to decide to accept cookies on a case-by-case basis, to completely or partly exclude all incoming cookies and to activate the deletion of cookies automatically when the browser is closed. You may manage many online advertisement cookies provided by companies via the American web page http://www.aboutads.info/choices/ or the web page of the European Union http://www.youronlinechoices.com/uk/your-ad-choices/. However, in this event the usage and especially the convenience of usage without using any cookies may be limited.
In the event personal data are processed such processing is based on Art. 6 para. (1) s.1 lit. f. GDPR with the legitimate interest of quality assurance or, as applicable with your explicit consent (based on Art. 6 para. (1) s.1 lit. a GDPR).
PARTICIPATION IN THE MEXICAN PROFESSIONALS PROGRAM; REGISTRATION ON THE WEBSITE
In the event you want to participate in the program “Mexican Professionals”, for example, via using the respective registration form on the Website, we will process your data for such purpose.
For the registration we collect your email address and further contact data.
Depending on the membership selected by you as a User, you are required to provide further data to us, including data on your further contact details, nationality, profession, career information, photo (“Profile Data”) for the purpose of providing the chosen services to you, in particular, displaying such Profile Data to other logged-in Users on the platform. More information on the memberships and requirements may be found here: https://www.omnisavy.com/memberships
The Profile Data provided by you as a User of our services may also include special categories of personal data (i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation). This applies, for example, for pictures you upload or otherwise provide to us.
When submitting or uploading the Profile Data on the Website you as a User explicitly agree that such data
are displayed within the online platform accessible to other logged-in Users (applicable to the “Access”, “Professional+ (Plus)”, “Professional”, “Expert+ (Plus)”, or “Expert” Membership, please note that the “Access” Membership Users do not have a visible profile but may see the other logged-in User profiles when logged in);
are printed in the book “Mexican Professionals in Germany” (if and as applicable for the chosen Membership);
are used for the purposes described in the terms and conditions if your consent for such data processing is required.
Such consent also applies to special categories of personal data (such as references to your health or ethnical origin), if provided. In the event data processing is based on your consent you may withdraw your consent any time with effect for the future (email to: firstname.lastname@example.org).
In the event your profile and data already went into publication for the book “Mexican Professionals in Germany” (if and as applicable for the chosen Membership) your data will not be removed from such book but from our online services.
If you chose a paid membership the payment provider(s) engaged by us process your payment data for the purpose of the payment to us. Currently we use the services by Klarna (more information: https://www.klarna.com/sofort/datenschutz/), Paypal (more information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE), iDeal by Stripe (more information: https://stripe.com/de/privacy) and payment provider for credit/debit cards.
The data necessary for our services are processed on the basis of initiating a business relationship or continuing an existing business relationship (legal basis Art. 6 para. (1) s.1 lit. b GDPR) or based on your consent (legal basis Art. 6 para. (1) s.1 lit. a GDPR or for special categories of personal data Art. 9 para. (2) s.1 lit. a GDPR). We may also process your data based on our legitimate interests based on our business practices or for the defense of claims (legal basis Art. 6 para. (1) s.1 lit. f GDPR).
For details on the use of your data for our program please also refer to our terms and conditions https://www.omnisavy.com/terms-conditions .
When applying and joining our program your data are processed in and outside the EU/EEA.
For the purpose of the Mexican Professional program we use the Google cloud services, whereas data are processed on servers in the EU/EEA. For more information please refer to: https://cloud.google.com/terms/data-processing-terms
For sending emails we use the service ‘Mailchimp’ by The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA that processes data on our behalf in the USA (see: https://mailchimp.com/legal/data-processing-addendum/). The provider of Mailchimp ensures the data protection standards applicable in the EU via its certification according to the privacy shield agreement and EU Standard Contractual Clauses. For more information please also refer to: https://mailchimp.com/legal/privacy/
For more information relating to third party providers used by us that process your data you may contact us anytime, for example via email to email@example.com.
DATA PROCESSING ON OUR SOCIAL-MEDIA-PAGES
We operate Social-Media-Pages on
LinkedIn (linkedin.com or applications) by LinkedIn Corporation, Legal Department – Privacy, 1000 W. Maude Ave, Sunnyvale, CA 94085, USA / LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, please also refer to: https://www.linkedin.com/legal/privacy-policy / https://www.linkedin.com/psettings/privacy
Twitter (twitter.com or applications) by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA / Twitter International Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland, please also refer to: https://twitter.com/de/privacy / https://twitter.com/personalization;
When you visit our Social-Media-Pages, data is processed both by us and by the responsible social media provider.
The respective provider of Social Media assumes the data protection obligations towards you as the user, such as information on data processing, and is the contact person for your rights. This results from the fact that such provider has direct access to the relevant information on the Social-Media-Page and the processing of your data. However, you are also welcome to contact us if this should become necessary and we will then forward the request to the respective provider if necessary.
When using the Social Media providers set forth above data may also be processed outside the EU. The US companies of Facebook/Instagram, LinkedIn, Twitter, Google/Youtube and Eventbrite are certified in accordance with the EU-US Privacy Shield agreement, which guarantees compliance with data protection regulations in the EU. For more information please refer to their respective privacy policies or https://www.privacyshield.gov.
With our Social-Media-Pages, we can communicate with you and provide you with interesting information. We may receive further data from you through your comments, shared images, messages and reactions, which are then processed to answer or communicate with you. If you use Social Media on several end devices, a cross-device analysis of the data can take place.
Data processing takes place with your consent or for the purpose of answering your enquiry (Art. 6 para. (1) s.1 lit. a, b GDPR) or on the basis of legitimate interests in improving the services, advertising and marketing activities and presentation to the outside world (Art. 6 para. (1) s.1 lit. f GDPR).
Use of Page Insights on Facebook and Instagram:
Facebook/Instagram and we use the Page Insights function to process statistical data from users of our Facebook/Instagram pages. This involves the processing of data in the form of so-called ‘page insights’, which are described in more detail at https://www.facebook.com/business/a/page/page-insights / https://help.instagram.com/788388387972460?helpref=faq_content. Information on these page insights and data processing can be found in the controller addendum: (https://www.facebook.com/legal/terms/page_controller_addendum) as well as the privacy policies by Facebook/Instagram.
Data processing via LinkedIn:
LinkedIn and we may use your data for careers and recruiting services for our LinkedIn pages (see also the data processing agreement: https://legal.linkedin.com/dpa). As LinkedIn user you can at any time influence how your user behaviour is recorded when you visit LinkedIn pages. Data on how you use LinkedIn may be shared with us and certain third parties as described in detail here: https://www.linkedin.com/legal/privacy-policy#share
Display of Content when using Twitter:
Data processing via YouTube and Google Account:
When you have an existing YouTube or Google account your account data will be connected and processed. If you do not wish this to happen you should log our from your existing YouTube or Google account. As YouTube user you can at any time influence how your user behavior is recorded when you visit YouTube pages. For further information please refer to: https://policies.google.com/privacy
Data processing via Xing:
When visiting our Xing page your data will be processed by Xing and, as applicable, by us, for example if you interact with our Xing page. As a Xing user you can at any time influence how your user behavior is recorded when you visit Xing pages. For more information please refer to: https://privacy.xing.com/de/datenschutzerklaerung
Data processing via Eventbrite:
When visiting our Eventbrite page your data will be processed by Eventbrite and, as applicable, by us, for example if you sign up for our events displayed on the Eventbrite pages. As an Eventbrite user you can at any time influence how your user behavior is recorded when you visit Eventbrite pages. For more information please refer to: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de