1. Name and contact details of the data controller
Innere Wiener Straße 5c
Tel.: +49 (0)89 44 11 98-0
Fax: +49 (0)89 44 11 98-2 99
Commercial Register no: HRB 139 431
Tax ID no: DE 219 22 32 82
2. Collection and storage of personal data and the nature and purpose of their use
When you visit our website www.maturity.com, the browser you use on your device automatically sends information to our web server. This information is temporarily stored in what is known as a log file. The following information is collected without your intervention and stored until it is automatically deleted:
- the IP address of the requesting computer
- the date and time of access
- the name and URL of the file retrieved
- the website from which access occurred (referrer URL)
- the browser used and, possibly, the operating system on your computer, as well as the name of your access provider.
We process these data for the following purposes:
- to ensure that the connection to our website is established smoothly
- to ensure the convenient use of our website
- to analyse system security and stability and
- for other administrative purposes.
The legal basis for processing these data is Article 6(1)(f) of the GDPR. Our legitimate interest is based on the data collection purposes referred to above. Under no circumstances will we use the data we collect for the purpose of drawing conclusions about you.
3. Disclosure of data
We do not share your personal data with third parties for purposes other than those stated below. We only share your personal data with third parties if:
- you have expressly consented to this under Article 6(1)(a) of the GDPR,
- pursuant to Article 6(1)(f), disclosure is required for the establishment, exercise or defence of legal claims and there is no reason to consider that you have an overriding legitimate interest in not disclosing your data,
- disclosure pursuant to Article 6(1)(c) of the GDPR is a legal requirement, and
- this is permitted by law and required for the fulfilment of contractual obligations to you pursuant to Article 6(1)(b) of the GDPR.
Cookies do not harm your device and do not contain viruses, Trojans or any other malware. They contain information that is specific to your device. However, that does not mean that we can use them to directly obtain information about your identity. Cookies are used to improve your browsing experience on our website. For example, we use what are known as session cookies to identify individual pages on our website that you have visited before. These are automatically deleted when you leave our website. We also use temporary cookies to optimise the user friendliness of our website. These are stored on your device for a set period of time. When you visit our website again to use our services, your browser automatically recognises that you have visited it before and what information and settings you entered, so that you don’t have to enter them again.
5. Analysis tools
a) Tracking tools
We use the following tracking measures on the basis of Article 6(1)(f) of the GDPR. We use these tracking measures to enable us to customise our website based on your preferences and to constantly optimise it. We also use the tracking measures to compile statistics on the use of our website and to optimise our offer for you. These interests may be regarded as legitimate within the meaning of the provision referred to above. The data processing purposes and data categories concerned can be obtained from the individual tracking tools.
i) Google Analytics
- the browser type/version
- the operating system used
- the referrer URL (the page you visited that led you to our website)
- the host name of the accessing computer (IP address)
- the time of the server request
are transmitted to and stored on a Google server in the USA. This information is used for analysing use of the website by users, compiling reports on website activity and providing other services relating to website and internet usage for the purposes of market research and to enable the website to be customised based on users’ preferences.
This information may also be transferred to third parties if required by law or if third parties process these data on our behalf. Your IP address will never be combined with any other data provided by Google. IP addresses are anonymised so that they cannot be associated with you (IP masking). You can stop cookies being installed on your device by configuring a setting in your browser software. However, we would like to point out that if you do so, you may not be able to use the full functionality of this website. You can also prevent the data generated by the cookie and related to your usage of this website (including your IP address) from being collected and processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, particularly in browsers on mobile devices, you can also prevent your data from being collected by Google Analytics by clicking on this link: Disable Google Analytics data collection for this site. This places an opt-out cookie on our website which will stop your personal data being collected when you visit it in the future. The opt-out cookie only works in this browser and on our website and is stored on your device. If you delete cookies in this browser, you will need to reinstall the opt-out cookie. For more information about privacy in relation to Google Analytics, see Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
ii) Google Adwords Conversion Tracking
We also use Google Conversion Tracking to compile statistics on the use of our website and to optimise our website for you.
If you have arrived at our website via a Google ad, Google Adwords places a cookie (see clause 4) on your computer. These cookies expire after 30 days and cannot be used to identify you personally. If a user visits certain pages on the Adwords advertiser’s website and the cookie has not yet expired, Google and the advertiser will be able to tell that the user clicked on the ad and was forwarded to this website. To ensure the legitimate use of Google Analytics, data protection authorities require the advertiser to sign a data processing agreement. You can find more information on this at http://www.google.com/analytics/terms/de.pdf.
6. Job applications
We are always happy to receive unsolicited job applications. The data you send us in your application are processed as part of the application process. If your application is unsuccessful, the information you send us will be deleted at the earliest three months after the application process is completed. This does not apply if there are statutory provisions preventing their deletion or if you have expressly consented to the further retention of the data. Please ensure that you use a sufficiently secure method of transmitting the data to us. Sending an e-mail without a suitable encryption method is not recommended as your data could quite easily be intercepted and used by unauthorised persons.
7. Rights of the data subject
You have the right:
- to request the information about your personal data processed by us (Article 15 of the GDPR). In particular, you can request information on the purposes of the processing, the category of the personal data, the categories of recipients to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint, the source of the data if they are not collected from us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about the details;
- to obtain, without undue delay, the rectification or completion of personal data concerning you that are stored by us if these data are inaccurate or incomplete (Article 16);
- to obtain the erasure of personal data concerning you that are stored by us, provided the processing is not required for the purposes of exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Article 17);
- to request restriction of processing of your personal data where the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of your personal data and we no longer need the data but you need them for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Article 21 of the GDPR (Article 18);
- to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller (Article 20);
- to withdraw your consent at any time (Article 7(3)). This will prevent us from continuing to process the data based on this consent in the future;
- to lodge a complaint with the supervisory authority (Article 77). As a rule, this will be the supervisory authority of your habitual residence or place of work or of our registered office.
8. Right to object
If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, Article 21 gives you the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you, or if the objection relates to direct marketing. In the latter case, you have a general right to object, which we will comply with without the need for you to specify grounds relating to a particular situation.
To exercise your right to object or to withdraw your consent, simply e-mail firstname.lastname@example.org.
9. Data security
We use the SSL (Secure Socket Layer) protocol to secure your connection to our website in conjunction with the highest level of encryption supported by your browser. This will usually be 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology. You can tell whether individual pages on our website are encrypted by the key or locked padlock symbol shown in the address bar or status bar in your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. We constantly improve our security measures in line with technological developments.