DE / EN
 

B2B advertising agency zuk. AG

Privacy policy

This data protection statement informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the websites, functions and content associated with it, as well as external online presences such as our social media profiles (hereinafter collectively referred to as "online offering"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Contact details

zuk. AG
Leyendeckerstraße 33, D-50825 Cologne
Bobinethöfe 14, D-54294 Trier
http://www.zuk.de/impressum

Data protection officer

Please contact for more information:
Jan Schäfer
E-Mail: datenschutz@zuk.de

Agency services

We process our clients' data as part of our contractual services, which include conceptual and strategic consulting, campaign planning, software and design development/consulting or maintenance, campaign implementation and processing/handling, server administration, data analysis/consulting services and training services.

In doing so, we process inventory data (e.g. customer master data such as names or addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photos, videos), contract data (e.g. subject matter of the contract, term), payment data (e.g. bank details, payment history), usage data and metadata (e.g. in the context of evaluating and measuring the success of marketing activities). As a matter of principle, we do not process special categories of personal data unless it is part of a contract processing. Data subjects include our customers, prospective customers and their customers, users, website visitors or employees and third parties. The purpose of the processing is the provision of contractual services, billing and our customer service. The legal basis for the processing is Art. 6 par. 1 lit. b GDPR (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimisation, security measures). We process the data necessary for the establishment and performance of the contractual services and inform you of the necessity of their disclosure. Data will only be passed on to third parties if this is necessary in connection with an order. When processing the data made available to us within the scope of an order, we act in accordance with the instructions of the customer as well as the legal requirements of a commissioned processing pursuant to Art. 28 GDPR and do not process the data for purposes other than those specified in the order.

We delete data after the expiry of statutory warranty and similar obligations. The need to retain the data is reviewed every three years; in the case of statutory archiving obligations, the data is deleted upon expiry (6 years in accordance with Section 257 (1) HGB, 10 years in accordance with Section 147 (1) AO). In the case of data provided to us by the customer as part of an order, we delete the data in accordance with the specifications of the order, in principle at the end of the order.

Administration, financial accounting, office organisation, contact management

We process data as part of the administration and organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The bases for the processing are Art. 6 par. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and visitors to the website are affected by the processing. The purpose and our interest in the processing is administration, financial accounting, office organisation, data archiving, i.e. tasks that serve the maintenance of our business activities, the fulfilment of our tasks and the provision of our services. The erasure of data relating to contractual services and contractual communications corresponds to the information provided in these processing operations.

We may disclose or transfer information to tax authorities, advisors such as accountants or auditors, and other payroll and payment service providers.

We also store information about suppliers, organisers and other business partners based on our business interests, for example to contact them at a later date. This information, most of which is company related, is stored permanently.

Working with processors and third parties

If, in the course of our processing, we disclose, transfer or otherwise grant access to data to other persons and companies (order processors or third parties), this will only be done on the basis of a legal permission (e.g. if a transfer of data to third parties, such as payment service providers, is necessary for the performance of the contract pursuant to Art. 6 (1) lit. b GDPR), if you have consented to this, if a legal obligation exists or on the basis of our legitimate interests. 6 (1) lit. b GDPR), you have consented, a legal obligation provides for it or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 GDPR.

Important to know when applying

We process applicant data only for the purpose of and within the scope of the application process in accordance with legal requirements. Candidate data will be processed to fulfil our (pre-)contractual obligations within the scope of the application process if data processing becomes necessary for us, e.g. within the scope of legal proceedings.

Application process

The application process requires candidates to provide us with candidate information. The required candidate information is marked if we offer an online form, otherwise it is derived from the job descriptions and basically includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. Candidates may also voluntarily provide us with additional information.

By submitting an application to us, applicants consent to the processing of their data for the purposes of the application process in the manner and to the extent set out in this Privacy Policy.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily disclosed in the course of the application procedure, their processing is also subject to Art. 9 (2) lit. b GDPR (e.g. health data such as severely handicapped status or ethnic origin).

Applicants will have their own email address jobs@zuk.de which is not linked to our email archive. Please note, however, that emails are not encrypted and it is the candidate's responsibility to ensure that they are. Candidates will still have the option of sending their application by post.

The data provided by applicants may be further processed by us for the purposes of the employment relationship if the application is successful. Otherwise, in the event of an unsuccessful application for a vacancy, applicants' data will be deleted. Candidate data will also be deleted if an application is withdrawn, which candidates are entitled to do at any time.

The data provided by applicants may be further processed by us for the purposes of the employment relationship if the application is successful. Otherwise, in the event of an unsuccessful application for a vacancy, applicants' data will be deleted. Candidate data will also be deleted if an application is withdrawn, which candidates are entitled to do at any time.

Talent pool

As part of the application process, we offer applicants the opportunity to be included in our "talent pool" for a period of two years on the basis of consent in accordance with Art. 6 par. 1 lit. b. and Art. 7 GDPR.

The application documents in the Talent Pool will only be processed in connection with future job advertisements and employee searches and will be destroyed at the latest at the end of the application period. Candidates are informed that their consent to be included in the Talent Pool is voluntary, has no impact on the current application process, and that they may revoke this consent at any time for the future and object in accordance with Article 21 of the GDPR.

Deletion of applicant data

Subject to justified revocation by the claimant, the data will be deleted after a period of six months to enable us to answer any follow-up questions about the claim and to comply with our obligations under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.

Important information about the newsletter

The following information informs you about the content of our newsletter, the procedure for registration, delivery and statistical evaluation, as well as your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Newsletter

Content of the Newsletter: We send newsletters, e-mails and other electronic communications containing promotional information (hereinafter referred to as "Newsletters") only with the consent of the recipients or with legal permission. To the extent that the content of the newsletter is specifically described in the course of registration, such description shall be determinative of the user's consent. In addition, our newsletters contain information about our services and us.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other email addresses. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored with the dispatch service provider are also logged.

The logging of the registration process is based on our legitimate interests pursuant to Art. 6 (1) lit. f GDPR. Our interest is to use a user-friendly and secure newsletter system that meets our business interests and users' expectations and also allows us to prove consent.t.

Unsubscribe - You can unsubscribe from our newsletter at any time. You will find a link to unsubscribe at the end of each newsletter. We may retain unsubscribed email addresses for up to three years on the basis of our legitimate interests, before deleting them in order to be able to prove previously given consent. The processing of this data is limited to the purpose of possible defence against claims. An individual request for deletion is possible at any time, provided that the previous consent is confirmed at the same time.

Shipping service providers

The newsletter is sent via the mail service provider SC-Networks GmbH, Enzianstr. 2, 82319 Starnberg. You can view the privacy policy of the service provider here: www.sc-networks.de/unternehmen/datenschutz/. The use of this service provider is based on our legitimate interests according to Art. 6 par. 1 lit. f GDPR and an order processing agreement pursuant to Art. 28 para. 3 sentence 1 GDPR.

Newsletter - Success measurement

The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved by the software used on the server when the newsletter is opened. This retrieval will initially collect technical information such as browser and system information, as well as your IP address and the time of retrieval.

This information is used to technically improve the services on the basis of the technical data or the target groups and their reading behaviour on the basis of the locations from which they are accessed (which can be determined by means of the IP address) or the times at which they are accessed. Statistical surveys also include determining whether and when newsletters are opened and which links are clicked. For technical reasons, this information may be linked to individual newsletter recipients. However, it is neither our intention, nor that of the service provider, to track individual users. Rather, the analysis is used to help us understand our users' reading habits and to tailor our content or send different content to our users according to their interests.

We regret that it is not possible to unsubscribe from performance measurement separately, in which case you will have to unsubscribe from the entire newsletter.

Information about our online services

General information about our website and its processing

Collection of access data and log files

We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR, we collect data about each access to the server on which this service is located (so-called server log files). The access data include the name of the website accessed, the file, date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is retained for security purposes (e.g. to investigate abuse or fraud) for a maximum of 90 days and then deleted. Information that must be retained for evidentiary purposes is exempt from deletion until the incident has been resolved.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), on the basis of our legitimate interests. Google uses cookies. The information generated by the cookie about your use of the website is transmitted to and stored by Google on servers in the United States.

Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law.

Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. Pseudonymous user profiles may be created from the data processed.

We only use Google Analytics with IP anonymisation enabled. This means that the user's IP address will be shortened by Google within the member states of the European Union or other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened.

Google will not associate the IP address transmitted by the user's browser with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that you may also refuse the use of cookies by selecting the appropriate settings on your browser, including the use of cookies by your computer, the use of cookies by Google, and the storing and processing of cookies by Google: http://tools.google.com/dlpage/gaoptout?hl=de.

Vimeo

We may embed videos from the "Vimeo" platform provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy policy: vimeo.com/privacy. We note that Vimeo may use Google Analytics and refer you to the privacy policy (https://www.google.com/policies/privacy) and the Google Analytics opt-out (http://tools.google.com/dlpage/gaoptout?hl=de) or Google's marketing data use settings (https://adssettings.google.com/).

Youtube

We integrate videos from the YouTube platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: www.google.com/policies/privacy/, opt-out: adssettings.google.com/authenticated.

Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP-addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo”.

Google AdWords and conversion measurement

We use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 9.0.1 USA ("Google") on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO). DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").

Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. (https://www.privacyshield.gov/).

We use Google's "AdWords" online marketing service to serve ads to the Google advertising network (e.g. in search results, videos, on webpages, etc.) so that they are shown to users who are likely to be interested in the ads. This allows us to better target ads for and within our online services, so that users are only shown ads that are likely to be relevant to their interests. For example, showing a user ads for products he or she has shown interest in on other online properties is called "remarketing". To do this, when you visit our site and other sites on which the Google advertising network is active, a code is executed directly by Google and a web beacon (an invisible graphic or code) is embedded in the page. These are used to place a unique cookie, a small file, on the user's device (similar technologies can be used instead of cookies). This file records which web pages the user has visited, which content the user is interested in, which offers the user has clicked on, as well as technical information about the browser and operating system, referring web pages, time of visit and other information about the use of the online offer.

We will also receive a unique 'conversion cookie'. The information obtained from this cookie is used by Google to compile conversion statistics for us. However, we are only told the anonymous total number of users who clicked on our ad and were taken to a page with a conversion tracking tag. We do not receive any personally identifiable information.

User data is processed within the Google advertising network on a pseudonymised basis. This means that Google does not store or process the user's name or email address, for example, but processes the relevant data on a cookie basis within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information generated by the cookie about the user will be transmitted to and stored by Google on servers in the United States..

For more information on Google's use of data, settings and opt-out options, please refer to Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

Google maps

We integrate maps from the "Google Maps" service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, IP addresses and location data of users, which will not be collected without their consent (usually obtained through the settings of their mobile devices). The data may be processed in the United States.

Cookies

Information and options on the use of cookies can be found on our separate Cookie-Seite

Use of social media

We use various social media platforms on the basis of our legitimate interest (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR).

Facebook

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. (https://www.privacyshield.gov/).

When a user accesses a function of this online service that contains such a plugin, his or her device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online service by the latter. The processed data may be used to create user profiles. We therefore have no influence on the amount of data Facebook collects with the help of this plugin and therefore inform users according to our knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online service. If the user is logged into Facebook, Facebook can associate the visit with the user's Facebook account. When users interact with the plugins, for example by clicking the "Like" button or posting a comment, that information is transmitted directly from their device to Facebook and stored there. If a user is not a member of Facebook, there is still a possibility that Facebook may discover and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and settings options for protecting the privacy of users, can be found in Facebook's privacy policy: www.facebook.com/about/privacy/.

If a user is a member of Facebook and does not want Facebook to collect data about him or her via this online service and link it to his or her membership data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online service.

Google+

Our website may include features and content from the Google+ platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This may include, for example, content such as images, videos or text, and buttons that allow users to "like" the content, "like" the author of the content, or subscribe to our posts. Where users are members of the Google+ platform, Google may associate the use of the above content and features with the user's profile there.

Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. (https://www.privacyshield.gov/). For more information on Google's use of data, setting and objection options, please refer to Google's privacy policy.

Twitter

Within our online offer, functions and contents of the service Twitter, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can announce their liking of the content, the authors of the content or subscribe to our posts. If the users are members of the Twitter platform, Twitter can assign the call-up of the above-mentioned content and functions to the user's profile there. Twitter is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law. (https://www.privacyshield.gov/).

Xing

Our website may include functions and content from the Xing service provided by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. This may include, for example, content such as images, videos or text, as well as buttons that users can use to indicate that they like the content or the authors of the content, or to subscribe to our articles. If the users are members of the Xing platform, Xing may assign the use of the above-mentioned content and functions to the user's profile there.

LinkedIn

Features and content from the LinkedIn service provided by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland may be integrated into our online offering. This may include, for example, content such as images, video or text, and buttons that allow users to indicate their liking of the content, the authors of the content, or to subscribe to our posts. Where users are members of the LinkedIn platform, LinkedIn may associate the display of the above content and features with the user's profile on that platform. LinkedIn is a certified member of the Privacy Shield program, which ensures compliance with European data protection laws. (https://www.privacyshield.gov).