Individual customer serviceTel. +49 30 3999910

PRIVACY POLICY

The following information concerns how we use the data that is collected when you use our online services, who we share this data with and how you can influence the use and storage of your data. You can be confident that we will at all times adhere to applicable data protection regulations.

The data controller in the sense intended by the GDPR is:

TEST Berlin GmbH & Co. KG 
Knesebeckstrasse 59/61
10719 Berlin

Tel.         
+49 303 999 910
Fax          +49 303 999 918
Email        info@testberlin.de

Managing director: Elisabeth Unger

Our data protection officer can be contacted at:

TEST Berlin GmbH & Co. KG 

z.H.d des Datenschutzbeauftragen

Knesebeckstrasse 59/61
10719 Berlin

 

In the event of unlawful use of your data, you can also complain to the supervisory authorities responsible:

Berlin

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Maja Smoltczyk

Friedrichstr. 219

10969 Berlin

 

Tel.          +49 (0)30 138 890

Fax          +49 (0)30 215 5050

Email        mailbox@datenschutz-berlin.de

 

 

What data is collected and when? How is it used?

When you access our website we are informed of your IP address, your ISP, details of your web browser, operating system, referrer URL, host name, date and time of access, the page you visit and the website from which you are accessing our website. This information is stored on logfiles on a server and is used solely for the purposes of producing anonymous access data and for diagnostic purposes in the event of an error.

The legal basis for this data collection is art. 6 I f GDPR. This data is not matched to other data sources. Your IP address will be anonymised. Our legitimate interest in the collection of this data is based in the fact that we can use it to optimise our services for users by, for example, preventing attacks from malicious software or optimising access via specific browsers and, by logging your IP address, can ensure our site is fully accessible to users.

You have the right to object to the collection of this data, although if you did so you would not able to use our site. As soon as you data is no longer required for the purposes described above, it will be deleted.

The personal data you provide when you contact us or make an enquiry or booking will be saved by us only to the extent that it is required for processing the transaction or query concerned. The contact addresses you provide when booking will be used by us to send you offers from TEST Berlin GmbH & Co. KG. You can at any time and with future effect object to this use of your data without incurring any costs other than those charged for data transfer at the basic rate. Any processing beyond these purposes will take place only where required under statute or if you have consented.

When you open a customer account, the details you provide will be saved in order to simplify the booking process within the secure booking area. This means you will not have to enter your personal details every time you make a booking. If you make an enquiry via email, we will for response purposes collect and save your email address and the data contained in the email.

As far as processing orders is concerned, the legal basis for the collection and processing of your data is art. 6 I (b) GDPR. The legal basis for processing based on your consent is art. 6 I (b) GDPR.

This data will be deleted on expiry of the applicable statutory retention period. Where there is no such period, your data will be deleted when the purpose for which it was collected no longer applies.

You have the right at any time to revoke the consent you have provided. The lawfulness of the processing carried out with your consent will not be affected. For information on your right to deletion and to be informed, see below under Rights of Data Subject.

 

Is personal data shared with third parties?

Data you provide as part of a hotel booking will be shared by us with the hotel concerned insofar as is required for the booking to be processed.

For the processing of card payments we retain the services of B&S Card Service GmbH. Information provided by you in this context will be shared directly with, and processed by, the aforementioned company and the banks or credit institutions concerned.

Enquiry and booking data may be shared by us with our partner organisation TEST GmbH & Co. KG in Dusseldorf. Your data will not be shared with any other third party.

As far as processing orders is concerned, the legal basis for the collection, processing and sharing of your data is art. 6 I (b) GDPR.

 

Applicant information

When you reply to one of our job ads, your personal data such as name, address and phone number will be collected by us and stored for the duration of the selection process. Your data will be used only by authorised persons from our HR department or management for the purposes of the selection process. Your personal data will not be shared with any third parties. 

 

Should the job you have applied for already be filled, but you are suitable for another opportunity with us or with one of our partner organisations, we will retain your data or pass on your application after obtaining your express permission unless you have already consented as part of the application process.

 

If you make a speculative application and send it to our general email address, the content of your application can be seen by unauthorised persons. However your application documents will be immediately forwarded unopened to the HR department and the receipt and forwarding email will be deleted. Alternatively you can send your speculative application direct to bewerbungen(at)testberlin.de

 

The legal basis for this is art. 6 I (a) GDPR, as in sending your application documents you consent to the processing of your data. Unless statutory retention periods apply, your data will be deleted if you revoke your permission for its use but such revocation will not affect the lawfulness of processing already carried out on the basis of your permission. Where statutory retention periods do apply, your data will be locked instead of deleted. Otherwise application documents will be deleted six months after the close of the selection process, unless you have provided your express consent for the retention of your documents for future job offers. You have the right at any time to be informed of the data we hold about you or to object to its use. See Rights of Data Subject below.

 

 

Cookies

Cookies are information that is saved on the hard-drive of your computer by your web browser in the form of small files. The only cookies we save are session cookies, which allow the information you have provided to be matched with your user session while on our website. These cookies are automatically deleted after you close your browser.

Cookies are saved by third party providers as part of the Google Analytics und Google Maps services, which are embedded in our website.

The legal basis is art. 6 I (f). Our legitimate interest is based on the fact that we use the aforementioned cookies solely to make it easier for you to access our site. We do not collect any tracking data and thus do not encroach on your personal rights or basic freedoms. You can decline cookies in your web browser, but if you do so functionality may be impaired. For further rights see below under Rights of Data Subject.

 

Google Analytics

We use Google Analytics to measure the reach of our website. In so doing we adhere firmly to the criteria defined under the agreement reached between the data protection authorities and Google on the basis of the ruling of the Dusseldorfer Kreis committee. This website uses Google Analytics with the "gat._anonymizeIp();" code to ensure that IP addresses are captured anonymously (known as IP masking).

Google Analytics is a web analysis service from Google Inc. ("Google"). Google Analytics uses cookies. These are text files that are saved on your computer and that enable your use of the website to be analysed. The information generated by cookies regarding your use of this website is generally transferred to, and saved on, a Google server in the US.

However, the activation of IP anonymisation on this website means that, within EU member states or in other signatory states to the Agreement on the European Economic Area, your IP address will be abbreviated beforehand by Google. In exceptional cases, your full address will be transferred to a Google server in the US and abbreviated there. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with additional services associated with website and Internet use.

The IP address transferred from your browser as part of the Google Analytics service will not be combined with other data held by Google. You can prevent cookies being stored by adjusting your browser settings, although if you do so some of the functions of this website may not be fully available. You can also prevent Google capturing and processing the data produced by the cookie and based on your use of the website (incl. your IP address) by downloading and installing the plugin from http://tools.google.com/dlpage/gaoptout?hl=de

Further information on conditions of use and data protection can be found at http://www.google.com/analytics/terms/de.html and http://www.google.com/intl/de/analytics/privacyoverview.html

The legal justification for the collection and storage of this data is art. 6 I (f) GDPR. Our legitimate interest is based on the fact that we can use the analysis data to, for example, see where users leave the site so that we can then improve the site accordingly, or to see which countries our site is accessed from so that we can then adjust the choice of languages available. On our website, we use Google Analytics with the code "gat._anonymizeIp();" to ensure that IP addresses are captured anonymously (known as IP masking). It is therefore impossible for us to match the data collected with a specific person.  

 

 

Google AdWords

We use AdWords and thus also Google Conversion Tracking, an analysis service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google AdWords involves a cookie (called a conversion cookie) being placed on your computer when you arrive at our site via a Google ad. These cookies expire after 30 days and they are not used by us for the collection of any personal data that could be used to identify you personally. Nonetheless your IP address will be transferred to Google in the US so that Google can on our behalf undertake the evaluations described below. Google Ltd. is certified under the US's Privacy Shield scheme so that it provides a level of data protection appropriate for the GDPR. With Google Ltd. we have concluded a contract processing agreement by means of which Google Inc. has provided proof of its adherence to appropriate technical and administrative measures for the protection of your personal data.

 

Provided the cookie is active, we can when a user visits our site use Google Conversion Tracking to establish that the user has arrived at our site via an AdWords ad. Each AdWords customer receives another cookie. The information gained from the cookies is used solely to produce conversion rate statistics for us as an AdWords customer. This allows us to establish the total number of users who have clicked on one of our ads and been taken to a page of our website that is fitted with a conversion tracking tag.

 

The legal basis for the use of conversion tracking cookies is art. 6 (I) f GDPR. Our legitimate interest is based on the fact that, without the cookie, we cannot establish which AdWords cookies have been seen by you and thus cannot target our ads to conform to your interests. The encroachment on your personal rights is limited as we do not receive any data that could be used to identify you personally.

 

Objection and deletion You can prevent this information from being obtained by us by adjusting your browser settings to deactivate the automatic setting of cookies or to block cookies from the domain googleadservices.com, although if you do so you may restrict the usability of our website. You can also use Google's Ad Preferences Manager to deactivate the use of cookies and thus also of personalised ads. You have the right at any time to be informed of, and to object to, the data we hold about you. See Rights of Data Subject below.

 

 

Data transfer to non-EU countries

The information produced by cookies regarding your use of this website is generally transferred to a Google server in the US and saved there. However, the activation of IP anonymisation on this website means that, within EU member states or in other signatory states to the Agreement on the European Economic Area, your IP address will be abbreviated beforehand by Google. In exceptional cases, your full address will be transferred to a Google server in the US and abbreviated there. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with additional services associated with website and Internet usage. The IP address transferred from your browser as part of the Google Analytics service will not be combined with other data held by Google.

Google Ltd. is certified under the US's Privacy Shield scheme so that it provides a level of data protection appropriate for the GDPR. With Google Ltd. we have concluded a contract processing agreement by means of which Google Inc. has provided proof of its adherence to appropriate technical and administrative measures for the protection of your personal data.

 

 

Google Maps

We use the Google Maps service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you use Google Maps to view our business location, Google Maps can also collect data about you. For more details see the conditions of use for Google Maps and Google's data protection guidelines.

The legal basis for the collection and saving of this data is art. 6 I (f) GDPR. Our legitimate interest is based on the fact that the service makes it easier for you to find our business location.

Protection of your data on transmission

When your personal data and payment data is transmitted, it is protected by means of 128-bit SSL encryption technology. This means that unauthorised third parties cannot read this information during the transfer. You can see whether a page is protected by the presence of the prefix "https://" in the address bar of your browser instead of the usual "http://".

 

 

Rights of data subject

a. Right to be informed

You have the right at any time to receive without charge information about the data we hold about you. The type of information you have the right to be informed about is listed below. The information you request must be provided by us within one month.

(1) The purposes for which the personal data is processed;

(2)The categories of personal data being processed;

(3)The recipients or categories of recipients to whom your personal information has been or will be disclosed;

(4)The duration for which we intended to store your personal data or, if specific details on this point are not available, the criteria for establishing the duration;

(5) The existence of your right to the correction or deletion of your personal data and of your right to the restriction of processing by the data controller or your right to object to this processing;

(6) The existence of a right to complain to the supervisory authorities;

(7)All available information on the origin of the data if it has not been gathered from the data subject;

(8) The existence of an automated decision-making process including profiling as per art. 22 paras. 1 and 4 GDPR and – in such cases as a minimum – meaningful information regarding the logic involved and the consequences and intended outcomes of such processing for the data subject. We nonetheless point out that such decision-making processes are not used on our website.

(9)Whether your personal data is transferred to a non-EU country or to an international organisation. In this context you can also have the right to be informed as to the appropriate guarantees that under art. 46 GDPR have been put in place for the transfer of your data.

 

b. Right to correction

With regard to the personal data that we hold about, you have the right to the immediate correction or completion of any incorrect or incomplete data.

c. Right to deletion

Making a deletion claim

You have the right to the immediate deletion of your personal data, and we must immediately delete such data provided one of the following applies:

(1)The personal data held about you is no longer required for the purposes for which it was collected or has otherwise been processed.

(2

)You revoke your consent on which the processing as per art. 6 I (a) was based and there is no other legal basis for the processing.

(3)Under art. 21 I GDPR you object to the processing of your data as collected by us on the basis of our disclosed legitimate interests (e.g. for Google Analytics purposes) and there are no legitimate grounds for processing that take precedence or under art. 21 II GDPR you object to the processing of your data for direct marketing purposes.

(4) Your personal data has been unlawfully processed by us, e.g. without your consent or without any legitimate interest on our part.

(5) The deletion of your personal data is required in order to comply with our legal obligations under EU or German law.

((6)The data has been collected with regard to a minor in the context of the services offered as part of the information society as per art. 8 GDPR.

 

If we have published your personal information and if we are bound under one of the aforementioned conditions to delete it, we will in an appropriate manner inform the companies on whose websites the data has been published of your request for the data to be deleted and we will explain that, as the data subject, you have requested the deletion of all links to this data and of all copies and duplicates.

Exceptions

There is no right to deletion where processing is required

(1)for exercise of the right to freedom of expression and information;

(2) for compliance with a legal obligation that under EU or German law requires that processing be carried out, e.g. as part of statutory retention periods for tax purposes or if we have been requested to carry out a task in the public interest or at the behest of the authorities;

(3) on public health grounds as per art. 9 II (h) and (i) as well as art. 9 III GDPR;

(4) for archiving, academic or historical research purposes that are in the public interest or for statistical purposes as per art. 89 (I) GDPR insofar as the right to deletion would be likely to jeopardise or significantly affect the aims of such processing;

(5) for the exercise of rights or the bringing of or defence against legal claims, e.g. in court proceedings.

d. Right to restriction of data processing

You have the right to the restriction of our processing of your data if one of the following conditions applies:

(1) You dispute the accuracy of your personal data, in which case we must restrict its processing for as long as is required for us to review the data concerned;

(2) Processing is unlawful and you have declined to have your data deleted and instead request that the use of your personal data be restricted;

(3) If we no longer require the personal data for the purposes for which it was being processed but you need the data for the bringing of claims or the exercise or defence of your rights;

(4) If you object to the processing of your personal data that we have collected on the basis of our disclosed legitimate interests (e.g. for Google Analytics purposes), provided our legitimate grounds do not outweigh your rights.

Where processing has been restricted on one of the above grounds, it may then, except for its storage, be processed only with your consent or for the bringing of claims or the defence or exercise of rights or for the protection of the rights of another natural or juristic person (such as a corporate entity under German law) or on the basis of significant public interest in the EU or one of its member states.

If you have imposed restrictions on the processing of your data, we will inform you if we intend to rescind the restrictions.

e. Obligation to notify

Where you have exercised your right to the correction, deletion or restriction of the processing of your data by us, we must notify all the parties to whom your personal data has been disclosed of the correction or deletion of your data or the restriction of its processing, unless such notification is impossible or would involve disproportionate effort or expense.

You have the right to be informed of the identity of these recipients.

f. Right to portability

You have the right to receive in a structured, current and machine-readable format the personal data that you have provided to us. You further have the right to transfer this data to another company without hindrance by us, provided

(1)the processing is based on consent under art. 6 (I) GDPR or on a contract as per Art. 6 I (b) GDPR and

(2)the data is processed with the aid of automated procedures.

In exercising this right you are also entitled where technically feasible to have your personal data transferred directly from us to another company but this must not affect the freedoms or rights of other persons.

The right to data portability does not apply to the processing of data required for tasks we are obliged to perform in the public interest or at the behest of the authorities. 


g. Right to object

You have the right at any time to object, on grounds specific to your situation, to the processing of your personal data on the basis of art. 6 I (e) – necessary processing on the basis of public interest – or of (f) GDPR – processing on the basis of our disclosed legitimate interests (e.g. online marketing). This right also applies to profiling based on these provisions.

We will then cease to process your personal data unless we can prove compelling and legitimate grounds for the processing that outweigh your interests, rights and freedoms or unless the processing is for the bringing of claims or the exercise or defence of rights.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing. This right also applies for any profiling connected to such direct marketing.

If you object to the processing of your data for direct marketing purposes, your data will no longer be used for this purpose.

In connection with the use of information society services, you can, regardless of directive 2002/58/EC, exercise your objection via automated processes for which technical specifications are used.

h. Right to revoke your declaration of consent under data protection law

You have the right at any time to revoke your declaration of consent under data protection law. If you do so, your revocation will not affect the lawfulness of the processing that has already been carried of the basis of your consent.

i. Contact person for rights of data subject

If we fail to facilitate the direct exercise of your rights in connection with the processing of your data, please contact us at datenschutz(at)testberlin.de or by post for the attention of the data protection officer at the address provided in the Company Information section.