DATA PROTECTION

NOTE

Data protection information for the website and social media appearances of exciting AG or exciting Hellas M.E.P.E. and companies belonging to the group of companies (hereinafter referred to as exciting) and for the sending of emails by exciting

To provide you with information about our guidelines and activities relating to the collection, use and transfer of personal data on the Internet, exciting provides you with these guidelines in electronic form. This guideline applies to all websites of exciting, their branches and directly or indirectly controlled companies (collectively “exciting”) and appearances on various social media platforms. This does not apply to websites for which a separate privacy policy is displayed. The website on which you are currently located is hereinafter referred to as the “website”.

The website and social media appearances serve in particular to provide information about exciting services and exciting as an employer. Interested people also have the opportunity to get in touch with exciting via the website and social media sites.

Personal data is processed in connection with the website, the offers made available on the website, as part of social media appearances and for sending emails.

Below you will find information about the person responsible for the processing of your personal data, his representative and the data protection officer of the person responsible as well as your rights in relation to the processing of your personal data.

In the following you will also receive information about the processing of your personal data as well as information about the use of cookies in connection with the website, the offers made available on the website as well as the sending of emails for event invitations, offers and information about exciting and the company group related companies.

In this policy, the term “personal information” is used to refer to information that relates to an individual and that identifies it, either directly or indirectly (along with other information that exciting may come into your possession), such as your name, yours Email address or phone number.

Information about the person responsible:


Data Protection Officer
Name: Mr. Pantelis Tsigkas
Straße: Dornhofstr. 38A
Ort: 63263 Neu-Isenburg
Telefon:
E-Mail: dataprivacy@prodyna.com
Benannt am: 1. Januar 2020
Dienstleister: ja – der Datenschutzbeauftragte ist ein externer Dienstleister
Funktion im Unternehmen:

Collection of personal data

In general, you can access exciting’s website without providing any personal information. Your browser transmits information to our server that is technically necessary for us to display our website to you and to ensure stability and security. This is the IP address, date and time of the request, time zone difference to GMT, content of the requests, access status / http status code, the amount of data transferred, website from which the request comes, browser, operating system and its interface and the language and Version of the browser software. To access some areas of our website, for example to apply or for another specific purpose, we may need personal data from you. The provision of personal data in such cases is voluntary and you are explicitly requested to provide such information and informed about the intended use of this personal data. If you do not provide us with personal data, you may not be able to use the functions offered by our website. The typical reasons why we collect personal data are listed below and supplemented by a brief description of how your personal data is treated in each case.

  • Communicating with you:We will come back to your comments and concerns that you send to us via our website, such as online inquiries, comments or registration for participation in a conference. This may involve calling you back by phone or sending an email to you.
  • Creation of aggregate statistics regarding the use of our website.
  • Your personal data will be saved accordingly on our systems.
  • Training and education. Your personal data will be used for certification exams and for participation certificates for the purpose of legitimizing and issuing your proof of further education. EXCITING or externally commissioned trainers use lists of participants with personal data for internal organization, e.g. the individual preparation of participants or the sending of training materials. Participation in feedback questionnaires on the quality of the training is voluntary and anonymized. Online registration for public training is done via our partner sites Eventbrite.de or XING.de, the data protection regulations there apply.

The following table lists the categories of personal data that exciting Hellas M.E.P.E. processes or could process as part of the processing activities described in this global data protection declaration.

 

Category of personal data

explanation

Personal data

Name, preferred gender-specific pronoun., Contact details of any kind (such as email, telephone numbers, address), gender, date of birth, age, place of birth. 

Confidential data

exciting Hellas M.E.P.E. may also collect certain types of confidential information if that is permitted under the law of the respective country or if you have given your consent, such as B. Health / medical data (including disability status and dietary requirements / allergies at events organized / sponsored by us). exciting Hellas M.E.P.E. uses this confidential information only for the purposes described in Table 3.

Audiovisual media
Photographs and images / recordings and voice recordings recorded on CCTV or other video systems.
Position

Description of current position, job title, employer, location, exciting Hellas M.E.P.E.contact (s). System and application access data

System and application access data

If you have access to systems from exciting Hellas M.E.P.E. exciting Hellas M.E.P.E. Collect data that is required to access such exciting Hellas M.E.P.E. systems and applications, e.g. System ID, LAN ID, email account, instant messaging account, mainframe ID, system passwords, access and activity logs, and electronic content created with exciting Hellas M.E.P.E. systems.

 

In addition, exciting Hellas M.E.P.E. Process the personal data listed in the table below for hiring purposes.

Personal data

In addition to the personal data listed above, exciting Hellas M.E.P.E. collect other personal data for recruitment purposes, e.g. B. National identification number, social security number, insurance information, family / partnership status, life partner, relatives, emergency contacts, military service.

Confidential data

 

exciting can collect certain types of confidential information if permitted by applicable country law or if you have consented to it, such as Health / medical information (including disability), union membership information, religion, race or ethnicity, minority flag, and (where permitted by law) information about criminal convictions and crimes. exciting collects this information for specific purposes, such as: B. Health / medical information to take into account a disability or illness and to provide health care services; Background checks; Religious or church affiliation and personal diversity data (such as race or ethnicity) to meet legal obligations and internal policies related to diversity and equal treatment.
Immigration law data

exciting Hellas M.E.P.E. may collect data about citizenship, passport, residence or work permit (physical copy and / or electronic copy).

Talent Management Information

Information required for a background review, details of performance decisions and results, performance feedback and warnings, e-learning / training programs, performance and development reviews (including information that you provide when requesting / providing feedback, creating Priorities, updating your entries in relevant tools), driving license and biographical information.

 

As stated in the global data protection declaration, exciting processes your personal data for various purposes. The following table shows the individual purposes for which exciting processes your personal data.

Purpose
Explanation

Facilitating communication with you (even in emergencies)

Facilitating communication with you, ensuring business continuity, protecting the health and safety of employees and other people, protecting IT infrastructure, office equipment and other objects, facilitating communication with you and the emergency contacts you have mentioned.

Compliance with legal requirements

Compliance with legal requirements, such as Legal submission, bookkeeping and reporting obligations, performing audits, approval of state inspections and compliance with other requirements of state or public authorities, participation in legal proceedings, e.g. for subpoenas, prosecution of legal claims and remedies, defense in the event of litigation and settlement of internal complaints or claims, conduct of investigations and compliance with internal guidelines and procedures, protection, enforcement or defense of legal rights, personal rights, security or property of exciting, exciting subsidiaries or their employees, representatives and contractors (including the enforcement of relevant agreements and terms of use), protection of data security, privacy and security of users of exciting products, services or the public, protection against fraud or requirements for the purpose of risk management ,

Tracking your use of exciting property

Monitoring of activities in accordance with the law of the respective country and / or in accordance with the applicable exciting guidelines (including monitoring the use of exciting resources).

Data analysis

Analyzes of business processes and data to describe, predict and improve the economic performance of exciting and / or to offer the user a better experience. The analyzes include in particular the areas of descriptive analyzes, predictive analyzes, analyzes of the behavior of individuals (customers, business contacts) through the use of personal data as well as marketing, individual customer view and customer journey analyzes.

Recruitment

Managing applications, including conducting interviews and evaluations, performance reviews, financial planning, performing payment management, managing inclusion and diversity programs, conducting background checks, planning and monitoring training needs.

 

Use of personal data as part of sales-promoting measures The majority of the personal data we collect and use to promote sales relates to individual employees of our customers and other companies with whom we have an existing business relationship. Furthermore, we can obtain contact information from publicly accessible sources, including the content published on the social media websites, in order to establish initial contact with a relevant employee at a customer or another company. We send commercial emails in accordance with applicable advertising law to employees of our customers or other companies with whom we want to develop or maintain a business relationship. Our targeted e-mails typically contain web beacons, cookies and comparable technologies, with the help of which we can determine whether you are opening, reading or deleting the message and which links you may click on. If you have a link in a promotional email from exciting Hellas M.E.P.E. click, we also use a cookie that logs the pages you have visited and the content downloaded from our website, even if you are not registered or logged in to our site. Targeted emails from exciting Hellas M.E.P.E. may contain additional data protection information required by applicable data protection law.

Like most companies, exciting Hellas M.E.P.E. for customer relationship management (CRM) a database technology for the implementation and tracking of our advertising measures. Our CRM databases contain personal data of employees of our customers or other companies with whom we already want to maintain or develop a business relationship. The personal data used for this purpose includes relevant business information such as contact details, publicly available information (e.g. membership in a committee, published articles, press releases, your public communications on social media websites, if relevant for business), your reactions to targeted e- Mails (including network activities when following the links sent with our mail), the website activities of the users registered on our website and other business information included by the exciting employees, based on the personal interactions with you. If you would like to be removed from our CRM databases, please contact us. We may combine the data from publicly available sources with the data that we have received from our various interactions with you via email, website or through personal contact (this includes information that is collected across our various websites, such as For example, through our career and company websites and information that is collected when you register on one of our pages, log in or connect to our pages using your login information used for social media, such as LinkedIn and Xing). We combine this data to better assess your experience with exciting Hellas M.E.P.E. as well as to carry out the other activities described in this data protection declaration.

We can forward your personal data in connection with a (potential) business or economic transaction to our service providers, professional consultants, as well as to public and state authorities or to third parties, which third parties may be located in other countries. Before forwarding, we take the necessary steps to ensure that your personal data is adequately protected in accordance with the relevant data protection laws and exciting internal guidelines. Unless otherwise notified, the transfer of your personal data from the European Economic Area (EEA) to third parties outside the EEA is based on an adequacy decision or is subject to the EU standard contract clauses (a copy of the standard contract clauses can be obtained using the contact form below). Any other cross-border transfer of your personal data not related to the EEA will be in accordance with the corresponding international data transfer mechanisms and security measures.

Advertising communications law

You can exercise your right to prevent advertising communications directed to you by ticking certain boxes in the forms that we use to collect your personal data or by using the unsubscribe option contained in our emails sent to you. You can also contact us at any time to exercise your right to stop further advertising communications or to have your personal data deleted from our customer relationship management (CRM) databases. In such cases, we store a minimum of personal data in order to record your cancellation and to prevent further contact with you. Alternatively, you can send us your request after unsubscribing by email dataprivacy@exciting.com.

If you have any questions about data protection or would like to give us permits for websites or for advertising purposes, please contact us.

Use of personal data when you visit our business premises

In addition to the information presented above, this section tells you how we use personal data when you visit exciting Hellas M.E.P.E.

This information also relates to the potential processing of your personal data by video surveillance and access control systems if such systems are active.

When entering our business premises, personal data such as surname, first name and, if applicable, employer are collected, as well as your arrival and departure times. This is based on project-specific requirements that have an increased level of security and make this documentation necessary. This data is also usually stored for 12 months.

If you have received an access card from us, access to the premises is noted and saved by the office complex’s own access control system. If you want to see more information about this, please contact us with the specific address you have questions about.

Personal data worth protecting

Exciting Hellas M.E.P.E. no “particularly sensitive personal data” about the website. “Personal data worthy of protection” are personal data relating to race, political opinion, religious or philosophical conviction, union membership, health or sex life. By voluntarily providing us with particularly sensitive personal data (e.g. by submitting your CV or applying online for a job), you expressly consent to the use of your personal data as described in this policy.

Passing on your personal data

exciting is a global organization. We have different legal entities (e.g. national companies) and partners in Switzerland, in certain EU member states and other European countries. Our internal processes and infrastructures are therefore international in nature and scope.

Accordingly, you should be aware that we can pass on your personal data to third parties for processing on our behalf. We require third parties to treat the personal data received in accordance with exciting privacy and security guidelines.

Your personal data may also be disclosed across borders. Your personal data will only be shared across borders (i) in countries with an equivalent data protection standard or (ii) on the basis of officially recognized data protection agreements or (iii) on the basis of officially recognized standard data protection clauses.

 

Your rights Below you will find more detailed information about your rights in relation to the processing of your personal data:

I. Right to information

You as a person under the conditions of Article 15 of the General Data Protection Regulation have a right to information. This means in particular that you have the right to request confirmation from us as to whether we are processing your personal data. If this is the case, you also have a right to information about this personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes, for example, information about the processing purposes, the categories of personal data that are processed and the recipients or categories of recipients to whom the personal data have been or are still being disclosed (Article 15 paragraph 1 letters a, b and c of the General Data Protection Regulation). The full scope of your right to information can be found in Article 15 of the General Data Protection Regulation, which you can access here.

(For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL.

For the Greek version, please click on the following link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

II. Right to rectification

As a person, you have a right to rectification under the conditions of Article 16 of the General Data Protection Regulation. In particular, this means that you have the right to request that we immediately correct any incorrect personal data concerning you and complete incomplete personal data. The full scope of your right to rectification can be found in Article 16 of the General Data Protection Regulation, which you can access here.

(For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL.

Für die griechische Version drücken Sie bitte auf folgende Link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

III. Right to erasure (“right to be forgotten”) As a person, you have a right to erasure (“right to be forgotten”) under the conditions of Article 17 of the General Data Protection Regulation. This means that you basically have the right to request that we delete your personal data immediately and we are obliged to delete personal data immediately if one of the reasons listed in Article 17 (1) of the General Data Protection Regulation applies , This can be the case, for example, if personal data is no longer necessary for the purposes for which it was collected or otherwise processed (Article 17 (1) (a) of the General Data Protection Regulation). Insofar as we have made the personal data public and we are obliged to delete them, we are also obliged, taking into account the available technology and the implementation costs, to take appropriate measures, including technical ones, to other persons responsible for data processing who process the personal data to inform you that a data subject has asked you to delete all links to this personal data or copies or replications of this personal data (Article 17 (2) of the General Data Protection Regulation). The right to erasure (“right to be forgotten”) does not apply in exceptional cases insofar as processing is necessary for the reasons listed in Article 17 (3) of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary to fulfill a legal obligation or to assert, exercise or defend legal claims (Article 17 paragraph 3 letters a and e of the General Data Protection Regulation). The full scope of your right to erasure can be found in Article 17 of the General Data Protection Regulation, which you can access here.

(For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL. For the Greek version please press the following link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

IV. Right to restriction of processing

As a person, you have the right to restriction of processing under the conditions of Article 18 of the General Data Protection Regulation. This means that you have the right to request that we restrict processing if one of the conditions listed in Article 18 (1) of the General Data Protection Regulation is met. This can be the case, for example, if you dispute the accuracy of the personal data. In this case, the processing will be restricted for a period that enables us to check the accuracy of the personal data (Article 18 paragraph 1 letter a of the General Data Protection Regulation). Restriction means the marking of stored personal data with the aim of restricting their future processing (Article 4 number 3 of the General Data Protection Regulation). The full scope of your right to restriction of processing can be found in Article 18 of the General Data Protection Regulation, which you can access here.

(For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL. For the Greek version please press the following link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

V. Right to data portability

As a person, you have the right to data portability under the conditions of Article 20 of the General Data Protection Regulation. This means that you generally have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format, and you have the right to transmit this data to another person in charge without hindrance from us , provided that the processing is based on consent in accordance with Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a of the General Data Protection Regulation or on a contract in accordance with Article 6 paragraph 1 letter b of the General Data Protection Regulation and the processing is carried out using automated processes (Article 20 paragraph 1 of the General Data Protection Regulation). You can find information on whether processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the General Data Protection Regulation or on a contract in accordance with Article 6 (1) (b) of the General Data Protection Regulation the legal basis for processing in section C of this data protection information. When exercising your right to data portability, you also generally have the right to have your personal data transferred directly from us to another person responsible, insofar as this is technically feasible (Article 20 (2) of the General Data Protection Regulation). The full scope of your right to restriction of processing can be found in Article 20 of the General Data Protection Regulation, which you can access here.

(For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL. For the Greek version please press the following link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

VI. Right to object As a person,

You have the right to object under the conditions of Article 21 of the General Data Protection Regulation. We expressly point out your right to object as the person concerned at the latest when you first communicate with you. The right to object for reasons arising from the particular situation of the data subject is as follows. As a data subject, you have the right to object to the processing of personal data relating to you at any time for reasons arising from your particular situation To object to data that is based on Article 6 (1) (e) or (f) of the General Data Protection Regulation; this also applies to profiling based on these provisions. Information on whether processing is based on Article 6 (1) (e) or (f) of the General Data Protection Regulation can be found in the information on the legal basis for processing in Section C of this data protection information. In the event of an objection for reasons arising from your particular situation, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. The full scope of your right to object can be found in Article 21 of the General Data Protection Regulation, which you can access here.

(For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL. For the Greek version please press the following link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

VII. Right to withdraw consent

If processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the General Data Protection Regulation, you as the data subject have the right to withdraw your consent at any time in accordance with Article 7 (3) of the General Data Protection Regulation. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. We will inform you of this before giving your consent. Information on whether processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the General Data Protection Regulation can be found in the information on the legal basis for processing in Section C of this data protection information. (For the German version please press the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EL. For the Greek version please press the following link: https://eur-lex.europa.eu/legal-content/EL/TXT/PDF/?uri=CELEX:32016R0679&from=EL)

VIII. Right to lodge a complaint with the supervisory authority As a data subject, you have the right to lodge a complaint with the competent supervisory authority under the requirements of Article 57 paragraph 1 letter f of the General Data Protection Regulation. Duration of storage exciting Hellas M.E.P.E. stores your personal data only as long as necessary. Exciting Hellas M.E.P.E. specific policies and procedures for the management and storage of documents and data so that personal data is deleted after a reasonable time in accordance with the following retention criteria: exciting Hellas M.E.P.E. stores your personal data for as long as we have a business relationship with you. exciting Hellas M.E.P.E. stores your personal data for as long as is necessary to fulfill a legal obligation. exciting Hellas M.E.P.E. stores your personal data for as long as this is necessary to maintain or improve the legal position of exciting Hellas M.E.P.E. is required (e.g. in relation to limitation periods, legal disputes or official investigations). Please keep your personal data up to date and inform exciting Hellas M.E.P.E. about significant changes to your personal data.

Third party websites

The exciting website may contain links to third-party websites. exciting Hellas M.E.P.E. makes no representations regarding such third-party websites and does not provide any guarantee with regard to such third-party websites. You should be aware of the fact that the owners and operators of such third party websites may have personal data under conditions other than exciting Hellas M.E.P.E. collect, use or pass on. When you access an Internet link to websites of other providers, you should read the data protection guidelines of the relevant third-party websites. You should also be aware that third-party websites can use cookies.

Reorganizations of the company

Like many other organizations, exciting Hellas M.E.P.E. reorganize its business units worldwide from time to time, whether through the acquisition of new units or through the sale or merger of existing units. In such a case, personal data may be disclosed to potential or actual buyers of parts of our business, or personal data may be obtained from potential sellers. We endeavor to ensure the confidentiality of the personal data that is disclosed in the context of such transactions. Legal exciting Hellas M.E.P.E. may disclose personal information in order to enforce the terms of use of our website or to protect personal security or the exciting Hellas M.E.P.E. to protect in urgent cases. It is also possible that for legal reasons, due to a judicial or other official subpoena, order or order in any country in which we do business, we will be forced to disclose your personal data.

exciting Hellas M.E.P.E. takes various technological and procedural security measures to protect the personal data that we collect, use or forward from loss, misuse, modification or destruction. However, you should be aware that exciting Hellas M.E.P.E. cannot assume any responsibility for the security of the transmission of personal data over the Internet due to the openness and uncertainty associated with the Internet. Analysis software and cookies The website uses analysis software and cookies and uses social media plugins. You can find out more about these topics in the cookie policy.

Contact details

If you have any questions about this data protection guideline or for requests in connection with the use of your personal data by exciting, you are welcome to contact us at the following email address info [at] exciting [dot] com or under the telephone number 06102 2082 0.

 

Contact Data Protection Officer

Name: Mr. Pantelis Tsigkas

Street: Dornhofstr. 38A Location: 63263 Neu-Isenburg

Phone:

Email: dataprivacy@prodyna.com

Assigned on: January 1st, 2020

Service provider: yes – the data protection officer is an external service provider

Function in the company:

We strive to respond promptly to your inquiries, whereby a reasonable processing time can be expected.

 

CONTACT

 

Just contact us

 

We look forward to your questions and requests..

We are for your disposal at

+49 6102 2082 0

kontakt@exciting.de

Nice that you are interested in us

 

Everything you can learn about us

 

This is really exciting for job seekers

 

Career at exciting is not an empty word