Privacy Policy

Information pursuant to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR) and other data protection laws

1. Who is responsible for data processing and whom can I contact?

Name: Creative-North-Solution GmbH
Address: Bültbek 11/22962 Siek / Germany
Phone: +49 4107 /8775971
Email: info@creative-north-solution.com

2. For what purpose do we process your data and on what legal basis? / Can collection be refused?

Our website collects a range of general data and information each time it is accessed by you or an automated system.

2.1
For the performance of contractual obligations / Based on consent For the performance of contractual obligations / Based on consent (Art. 6(1)(a), (b) GDPR)

We use personal data (e.g. name, address, email address, telephone number, nationality, gender, company name, identification data, tax ID where applicable, customer number, SCHUFA score, Coface score) which you voluntarily provide to us in connection with the conclusion of a contract or in preparation of such a conclusion (e.g. via our contact form, for job applications, for contacting us by email), on the basis of the associated consent (Art. 6(1)(a) GDPR). This data is then processed by us in accordance with the statutory provisions (e.g. the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and the GDPR). Which personal data is transmitted to the data controller in this context results from the respective input form used for registration or contact, or from your decision as to which information you wish to provide to us. The fields marked with "*" in our contact form are mandatory in order to address you personally (name) and to be able to answer your questions (email).

We process the data required for the performance of a contract or for the implementation of pre-contractual measures (e.g. to answer your questions about a product or service) (Art. 6(1)(b) GDPR).

Without the provision of personal data, we cannot fulfil our obligations (e.g. invoicing, the provision of our services, the assertion of claims, correspondence with you).

2.2 As part of the balancing of interests (Art. 6(1)(f) GDPR)
Where necessary, we process your data beyond the actual fulfilment of the contract to safeguard the legitimate interests of ourselves or third parties (e.g.):

• Consultation and data exchange with credit agencies (e.g. SCHUFA) to determine credit and default risks as well as the need for an attachment protection account or basic account;
• Review and optimisation of procedures for needs analysis and direct customer contact;
• Advertising or market and opinion research, unless you have objected to the use of your data;
• Advertising or market and opinion research, unless you have objected to the use of your data;
• Prevention and investigation of criminal offences;
• For the operation of our website (including integration of social plug-ins);
• Measures for business management and the further development of services and products.

The processing is necessary to safeguard our legitimate interests (pursuant to Article 6(1)(f) GDPR) and is justified by a balancing of interests in our favour.

3. Who works with the data?

3.1
The personal data is used exclusively by the offices involved in the processing of the contract, by the staff in our company and their secretariats.

3.2
Processors engaged by us (Art. 28 GDPR, basis: Art. 6(1)(a) and (b) GDPR) may also receive data for the purposes mentioned (hosting providers, telephone providers). These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, advisory and consulting, as well as sales and marketing. We store the data received predominantly on our in-house servers, but in part also on servers of specialised service providers within Germany.

3.3
The data will not be passed on to third parties who are not involved in the processing of the contract. In particular, no personal data will be transferred to a third country or to an international organisation.

4. How long is your data stored?

4.1
Where necessary, we process and store your personal data only for the period required to achieve the purpose of storage, or where this is provided for by European directives and regulations or by another legislator in laws or regulations to which the data controller is subject. We are subject to various statutory retention and documentation obligations, which arise, among others, from the German Commercial Code (HGB), the German Fiscal Code (AO), the German Banking Act (KWG) and the German Anti-Money Laundering Act (GwG). Section 147 AO, for example, provides for a retention period of up to ten years.

4.2
If you have given your consent to the processing of personal data (Art. 6(1)(a) GDPR), we will delete this data at the latest as soon as you withdraw your consent and there is no other legal basis for the processing.

4.3
If the purpose of storage no longer applies or if a storage period prescribed by the European directives and regulations or by another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions, unless they are still required for the performance or initiation of a contract.

5. Is there automated processing?

We do not make any decision within the meaning of Art. 22 GDPR that is based solely on automated processing — including profiling — and/or that produces legal effects concerning you or significantly affects you in a similar way.

6. What data protection rights do you have?

You have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to data portability under Art. 20 GDPR, as well as the right under Art. 21 GDPR to object to the processing of your data. Any consent given to the processing of data can be withdrawn at any time (Art. 7 GDPR).

In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), see section 7.

The withdrawal / your request should be sent to:
Name: Creative-North-Solution GmbH Address: Bültbek 11/22962 Siek / Germany Phone: +49 4107 /8775971 Email: info@creative-north-solution.com

7. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the country where you are currently staying or where your place of work is located, or at the place where an alleged infringement has been committed, if you believe that the processing of personal data concerning you violates the GDPR.

The competent supervisory authority is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein Holstenstraße 98 24103 Kiel Germany Phone: +49 (0) 431 / 988-1200 Fax: +49 (0) 431 / 988-1223 Email: mail@datenschutzzentrum.de

8. Data protection in job applications and during the application procedure

We collect and process the personal data of applicants for the purpose of handling the application procedure (Art. 6(1)(a) and (b) GDPR). The processing may also take place electronically. This is particularly the case when an applicant submits the relevant application documents to the data controller by electronic means, for example by email or via a web form located on the website. Without the collection of the data, we cannot process the application. If you conclude an employment relationship with us, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two (2) months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. Another legitimate interest within this meaning would be, for example, the obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

9. Use of cookies

We use cookies (basis) to make the visit to our website attractive and to enable the use of certain functions. These are small text files that are stored on your computer. Cookies are used (for example) to support:

• storing preferences such as language or location;
• optimising integrated video displays;
• recognising your browser settings in order to display our website optimally on your screen; or
• detecting misuse of our websites and services (e.g. through multiple registrations).

The use serves to safeguard our legitimate interest in the optimisation and economic operation of our website (Art. 6(1)(f) GDPR). Most of the cookies used are deleted from the hard drive at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognise your computer on your next visit (so-called long-term cookies). These cookies serve to welcome you with your username and make it unnecessary to re-enter the password or fill in forms with your data for subsequent orders. External third parties are not permitted to collect, process or use personal data via our website by means of cookies. You can set your browser to inform you about the setting of cookies. You can then decide on a case-by-case basis whether to accept them, or you can refuse the acceptance of cookies altogether. If cookies are not accepted, the functionality of our website may be restricted.

The use serves to safeguard our legitimate interest in the optimisation and economic operation of our website (Art. 6(1)(f) GDPR) or because you have consented to its use (Art. 6(1)(a) GDPR). Most of the cookies used are deleted from the hard drive at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognise your computer on your next visit (so-called long-term cookies). These cookies serve to welcome you with your username and make it unnecessary to re-enter the password or fill in forms with your data for subsequent orders. External third parties are not permitted to collect, process or use personal data via our website by means of cookies. You can set your browser to inform you about the setting of cookies. You can then decide on a case-by-case basis whether to accept them, or you can refuse the acceptance of cookies altogether. If cookies are not accepted, the functionality of our website may be restricted.

When you first visit our website, you will be asked whether you agree to the use of cookies. If you do not agree, cookies will not be used for your visit. In this case we use a cookie ("CookieDisallowed") to ensure the removal of cookies during your visits (also in the future). This cookie has a lifetime of 30 days; after expiry, the cookie will, at your discretion, be deleted or renewed on your next visit to our website.

10. Use of Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to analyse the behaviour of website visitors. We receive various usage data, such as page views, the operating systems used and the origin of the user. This data is occasionally combined by Google into a profile assigned to the respective user or their end device. We have no influence on this. Google Analytics uses technologies that enable the user to be recognised for the purpose of analysing user behaviour (e.g. cookies). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

Our website uses Google Analytics exclusively with the "anonymizeIp()" extension. This anonymises the IP address by truncating it. A direct personal reference is thereby prevented. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activities and to provide further services to us related to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Only in exceptional cases is the full IP address transmitted to a Google LLC server in the USA and truncated there.

The processing for reading information on the device used only takes place if the user has given us express consent in accordance with Art. 6(1)(a) GDPR and, insofar as data is transferred to the USA, in accordance with Art. 49 GDPR. Without consent we will not use Google Analytics.

You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

Further information on Google Analytics can be found at: http://www.google.com/intl/de/analytics/privacyoverview.html.

We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google relies on so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

11. Google Maps

We use the interactive map of Google Maps on our website, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you have the option of completely deactivating Google Maps by switching off the JavaScript application in your browser. You will then no longer be able to use Google Maps on our website. The processing only takes place if the user has given us express consent in accordance with Art. 6(1)(a) GDPR and, insofar as data is transferred to the USA, in accordance with Art. 49 GDPR. Without consent we will not use Google Analytics. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Further information and Google's privacy policy can be found at: www.google.de/policies/privacy/.

12. Encryption

For the protection of the transmission of confidential data, we use SSL or TLS encryption. You can recognise this, for example, by the fact that "https://" appears in the address bar of your browser.

*Abbreviations

GDPR - General Data Protection Regulation
BDSG - German Federal Data Protection Act
TMG - German Telemedia Act
GwG - German Anti-Money Laundering Act
HGB - German Commercial Code
KWG - German Banking Act
AO - German Fiscal Code