- Anfänger
10.03.2026
Privacy Policy
(Information by ORDAT in accordance with Art. 13 GDPR)
1. Controller and data protection officer
The controller responsible for data processing operations on the website at the URL www.ordat.com (hereinafter referred to as the "Website") is ORDAT Gesellschaft für Organisation und Datenverarbeitung mbH & Co. KG (hereinafter referred to as "ORDAT" or "we").
Our contact details are as follows:
ORDAT Gesellschaft für Organisation und Datenverarbeitung mbH & Co. KG
Rathenaustraße 1
35394 Giessen
Phone: +49 (641) 79 41- 0
E-Mail: info@ordat.com
If you have any questions about data protection, please contact our data protection officer at datenschutz@ordat.com.
2. Processing of data
We process data ourselves and also use the services of third-party providers in accordance with the provisions and for the purposes set out in this privacy policy.
2.1 Newsletters
We offer a newsletter service on our Website. For this purpose, we use a double opt-in procedure. After you have entered your email address, we will send you a link to this address, which you can use to confirm your registration within 24 hours. If you do not wish to do so, your registration will be deleted. After confirmation, we will store your email address until you unsubscribe from the newsletter. The storage is solely for the purpose of sending the newsletter. The legal basis is Art. 6 (1) lit. a) GDPR.
To prevent misuse, we store the time of access when you register and confirm. The only mandatory information for registration is your email address, title, and last name. We do not request any further data from you.
You can revoke your consent to receive the newsletter at any time with future effect via the link contained in each newsletter or via our contact form.
2.2 Application form
You can apply for a job with us via our Website. To do so, enter your contact details and upload your application documents. After checking the information, you can send the application to us. The data you provide will be deleted when you leave our Website or otherwise cancel the process. We store your data solely for the application process and delete it once the process is complete.
For the application, we require the following mandatory contact details
- First and last name
- Date of birth
- Address
- An email address where we can reach you
- Resume
- Cover letter.
The legal basis for the processing is Art. 6 (1) lit. b) GDPR.
We treat personal user data as strictly confidential and do not pass it on to third parties. The inclusion of additional documents is purely voluntary and is not required for submitting your application. When you submit your application documents by email, they are automatically read and recorded in our applicant management system. All documents sent (cover letter, resume, certificates, and other evidence) and the information they contain are stored. The legal basis is Art. 6 (1) lit. b) GDPR.
You can withdraw your application at any time. To do so, you can use our contact form or contact our recruiting representative directly (Susanne Reeh, Susanne.Reeh@ordat.com).
The applicant portal is operated by concludis GmbH, Frankfurter Strasse 561, 51145 Cologne. The website is hosted on a dedicated server of Hetzner Online GmbH, Stuttgarter Str. 1 in 91710 Gunzenhausen. The data you send is therefore also processed by these companies exclusively on behalf of and on the instructions of ORDAT.
2.3 Registration for events
You can book participation in seminars and webinars on our Website and register for various other events. Depending on the type of event, we require various data from you, usually at least the mandatory information:
- First and last name
- Company
We use the data provided exclusively for the preparation, implementation, and follow-up of the event.
2.4 Support/ticket portal
You can request access to our support or ticket portal via our Website. Personal access to the ticket portal is required to use email support, the telephone hotline, and the ticket portal. This is restricted to individual employees of the company who are entitled to support. After submitting your request, you will receive your access data within 24 hours. We use the data you provide exclusively for the processing of our support or ticket services via the portal. The legal basis is Art. 6 (1) lit. b) GDPR.
Mandatory information for registration is:
- First and last name,
- Company you work for,
- Email address,
- Phone number,
- Postal address
- Your position, your role, and your department.
Any comments are purely voluntary and are not required for registration. You can request the deletion of your profile at any time using the contact form.
2.5 Contact form
You can submit a request to us using the contact form, which can be accessed via the "Contact" link. After you have submitted the completed form, we will send a copy to your email address. We use the data provided exclusively to respond to your request. The legal basis is Art. 6 (1) lit. a) GDPR.
Mandatory information is:
- Title
- First and last name
- Free text field for entering a message.
2.6 Whitepaper request form
You can request whitepapers on our Website using the download forms provided. Once you have submitted the completed form, we will send the requested whitepaper to your email address. We use the data provided exclusively for the purpose of sending you the requested whitepaper. The legal basis for this is Art. 6 (1) lit. a) GDPR.
The email address is a mandatory field.
In addition, you can voluntarily provide your first name, last name, and company name.
2.7 Data transfer to third parties
Transfers to third parties outside ORDAT beyond the companies listed in this privacy policy will only take place with your express consent, unless such transfer is legitimized by applicable law.
2.8 Web tracking using Google Analytics
We use Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of this tool is to enable the analysis of your user interactions on websites and in apps and to improve our offering and make it more interesting for you as a user based on the statistics and reports obtained.
We primarily collect interactions between you as a user of the Website and our Website using cookies, device/browser data, IP addresses, and website or app activities. The data is stored for 14 months. Google Analytics also collects your anonymized IP addresses to ensure the security of the service and to provide information about the region of the respective user (so-called "IP location determination"). With the anonymization function ("IP masking"), Google truncates the IP addresses within the EU/EEA by the last octet.
Google acts as a processor and we have entered into a corresponding contract with Google. The information obtained about your use of this Website and the anonymized IP addresses are usually transferred to a Google server in the USA and processed there. In these cases, Google has submitted to the EU-U.S. Privacy Framework.
The legal basis for the processing of the information is your consent (Art. 6 (1) lit. a) GDPR). You can withdraw your consent at any time without affecting the lawfulness of the processing until withdrawal. The easiest way to withdraw your consent is to use our Consent Manager or install the Google browser add-on, which is available at the following link: tools.google.com/dlpage/gaoptout.
For more information on the scope of Google Analytics, please visit marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245. General information on data processing, which according to Google also applies to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.
2.9 Use of Matomo
On this Website, we use the web analysis service Matomo to analyze and evaluate the use of our Website. The statistics obtained enable us to improve our services and make it more interesting for you as a user. Cookies are used for this purpose. The information obtained about website usage is transmitted exclusively to our servers and summarized in pseudonymous usage profiles. We use the data to evaluate the use of the Website. The collected data is not passed on to third parties.
The IP addresses are anonymized (IP masking). This means that IP addresses are shortened for further processing and cannot be directly linked to individuals. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
The data is processed on the basis of your consent in accordance with Art. 6 (1) lit. a) GDPR.
You can revoke your consent at any time by deleting the cookies in your browser or changing your privacy settings.
The Matomo program is an open source project. Information on data protection from the third-party provider is available at matomo.org/privacy-policy/.
2.10 Use of SalesViewer® technology
On this Website, data is collected and stored for marketing, market research, and optimization purposes using SalesViewer® technology from SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6 (1) lit. f) GDPR).
For this purpose, a JavaScript-based code is used to collect company-related data and information about its use. The online identifier collected using this technology is encrypted using a non-reversible one-way function (known as hashing). After a preselection process that filters out private accesses, the encrypted online identifiers are transmitted to SalesViewer, which in turn compares them with a database limited to company-related data. The data is immediately pseudonymized and is not used to personally identify visitors to this Website.
ORDAT does not process any personal data in connection with the use of SalesViewer® technology. SalesViewer's evaluations cannot be traced back to any natural person, and natural persons cannot be personally identified through them. SalesViewer processes the following data:
- Name, origin, and industry of the visiting company
- Source/referrer of the visiting company
- Keywords
- Visitor behavior
ORDAT receives an evaluation of the following information:
- Number of visits from specific locations
- Industries of visiting companies
- Name of the visiting company
- Date and time of the visit
- Visitor behavior on the Website.
ORDAT receives these evaluations to understand which information on the Website is of interest to visitors and to adapt ORDAT's offering accordingly to the needs of visitors.
The data stored within the scope of Salesviewer is deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations that prevent its deletion.
You can object to the collection and storage of data at any time with future effect by clicking on this link www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data on this Website in the future. An opt-out cookie for this Website will be stored on your device. If you delete your cookies in this browser, you will need to click on this link again.
2.11 Use of Google Ads
We use Google Ads to draw attention to our offers with the help of advertisements. If you access our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Art. 6 (1) lit. a) GDPR, i.e. integration only takes place with your consent.
The advertising material is delivered by Google via so-called "ad servers." For this purpose, we and other websites use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. The Google Ads cookies stored on our website enable us to obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that a user no longer wishes to be targeted) are usually stored as analysis values for this cookie.
The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user has clicked on the ad and been redirected to that page. Each Ads customer is assigned a different cookie, so that cookies cannot be tracked across the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We ourselves do not collect any personal data independently in the advertising measures mentioned, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google that provide information about which ads were clicked on, how often, and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users based on this information.
You can revoke your consent at any time without affecting the lawfulness of the processing until revocation. The easiest way to revoke your consent is via our Consent Manager CookieBot or via the following functions: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating interest-based ads from providers who are part of the "About Ads" self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browsers at the link www.google.com/settings/ads/plugin.
Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
2.12 Use of Microsoft Advertising (formerly Bing Ads)
We use Microsoft Advertising from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, to draw attention to our offers with the help of advertisements. If you access our website via a Bing ad, Microsoft Advertising will store a cookie on your device. The legal basis for the processing of your data is Art. 6 (1) (a) GDPR, i.e., integration only takes place with your consent.
The following personal data is processed:
- Device and browser information
- Activity data
- Website usage (UET - Universal Event Tracking)
- Location data
- Advertising ID
This data is stored for a period of 180 days.
The advertising material is delivered by Microsoft via so-called "ad servers." To do this, we and other websites use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. The cookies stored on our website enable us to obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that a user no longer wishes to be targeted) are usually stored as analysis values for this cookie.
The cookies set by Microsoft enable Microsoft to recognize your Internet browser. If a user visits certain pages on an Ads customer's website and the cookie stored on their computer has not yet expired, Microsoft and the customer can recognize that the user has clicked on the ad and been redirected to that page. Each Ads customer is assigned a different cookie, so that cookies cannot be tracked across the websites of other Ads customers. By integrating Microsoft Advertising, Microsoft receives information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Microsoft service, Microsoft can assign the visit to your account. Even if you are not registered with Microsoft or have not logged in, it is possible that the provider may obtain and store your IP address.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Microsoft server. We ourselves do not collect any personal data independently in the advertising measures mentioned, but only provide Microsoft with the opportunity to collect the data. We only receive statistical evaluations from Microsoft that provide information about which ads were clicked on, how often, and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users based on this information.
You can revoke your consent at any time without affecting the lawfulness of the processing until revocation. The easiest way to revoke your consent is via our Consent Manager CookieBot.
We have concluded a data processing agreement for the transfer of data to Microsoft . In addition, Microsoft is DPFA-certified, which provides a legal basis for possible data transfers to the USA (ensuring an adequate level of data protection).
2.13 Google Conversion Tracking
We use Google Ads with the additional application "Google Conversion Tracking." This is a process that allows us to check the success of our advertising campaigns. To do this, the advertisements are provided with a technical measure, e.g., an ID, which allows us to determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. This provides us with statistical information about the total number of readers of our advertisements, which advertisements are particularly popular, and, if applicable, further information about the consequences of the advertisement.
The legal basis for the processing of your data is also Art. 6 (1) (a) GDPR, i.e., integration only takes place with your consent. You can prevent or stop using the conversion tracking function in the same way as described above for Google Ads.
2.14 Cookiebot Consent Management Tool
We use the Cookiebot consent management tool from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, on our website. It is used for the purpose of automatically creating a cookie banner with a corresponding cookie declaration for website visitors. The following personal data is collected via the tool:
- the IP address in anonymized form,
- technical browser data,
- the current website URL, and
- the cookies approved by the user as proof of consent
- Country or region
The data is stored for a period of 12 months.
The legal basis for the use of the service is Art. 6 (1) lit. c) GDPR, processing is necessary to fulfill a legal obligation to which we are subject.
We have concluded a data processing agreement with Usercentrics A/S in accordance with Art. 28 GDPR for the transfer of your data to Usercentrics A/S. Your data will be processed exclusively on our behalf.
You can object to the collection and storage of your data at any time.
When using the service, your data will be transferred to the USA. In order to maintain an adequate level of data protection, we have concluded standard contractual clauses with Usercentrics A/S in accordance with Art. 46 (2) (c) GDPR.
3. Social Media
When you visit our social media pages and social media channels, your personal data is collected, used, and stored not only by us, but also by the operators of the respective social network. This also happens if you do not have a profile on the respective social network. The individual data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily traceable to us. For details on the collection and storage of your personal data and the nature, scope, and purpose of its use by the operator of the respective social network, please refer to the privacy policies of the respective operator.
a. Meta
In addition to us, the following are responsible for the company's presence on Facebook and Instagram in accordance with the GDPR and other data protection regulations:
Meta Platforms (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); further information on data protection can be found here:
https://privacycenter.instagram.com/policy
https://de-de.facebook.com/privacy/policy
Types of personal data
ORDAT processes the following personal data of users when they interact with social media channels:
- public profile information of the user;
- in posts, the personal data specified therein;
- for comments, the personal data provided therein;
- when contacting ORDAT via Messenger, the personal data provided therein;
- Further user data is processed via analysis services for the use of and interaction with social media channels.
Legal basis for the processing of personal data
Art. 6 (1) (b) GDPR (performance of a contract, implementation of pre-contractual measures)
ORDAT processes users' personal data for the purpose of fulfilling contracts concluded with users or for the implementation of pre-contractual measures. Personal data is made available to ORDAT when users
- ask questions about ORDAT's services via the social media channels
- request other information via ORDAT's social media channels.
If necessary for processing a request, the user's data will be passed on internally.
ORDAT points out that the submission of applications via social media channels is not permitted. ORDAT will not process any applications submitted via social media channels. An application tool is available on the ORDAT website for submitting applications, which should be used. Please refer to the ORDAT website at the URL www.ordat.com. Applications submitted via social media channels will be deleted immediately.
The type of data processed depends on the data that the user provides to ORDAT. As a rule, this includes the following data:
- First name, last name
- Title
- Personal data provided by the user when contacting ORDAT.
Art. 6 (1) (f) GDPR (protection of legitimate interests)
ORDAT also processes users' personal data to protect its legitimate interests. This is done for the following purposes:
- Evaluation of the analyses and statistics of social media channels created and provided by Meta with regard to user interaction with social media channels
- Improvement of social media channels in terms of their user-friendliness and attractiveness, as well as the implementation of user-oriented marketing measures
- Communication and interaction via the social media channels opened by users.
ORDAT does not have access to the personal data processed by Meta within the scope of Insights, but only to the summarized page insights. These are the following evaluations, each within a specific period of time:
User activities on social media channels
- Total actions taken on the page
- Age and gender of users, country
- Number of website clicks
- Number of clicks on phone number
- Total number of clicks on "call to action" buttons, age and gender of users, country, device type, city
- Total number of views of social media channels (area, age and gender of users, country, device type, city)
- Number of page preview views (total number, age and gender of users)
- "Likes" for social media channels (number and type of "likes")
- Information about posts (when fans of social media channels are online, post types, most popular posts from pages that ORDAT monitors)
- Post reach (number of users who have viewed a post at least once, type of users reached, reactions, comments, and shared content)
- Story reach (number of people reached)
- Number of recommendations of social media channels by users in posts or comments
- Number and percentage development of post interactions
- User responsiveness to posts on social media channels (number, percentage change in number, response time, and percentage change in response time)
- Videos
- Page subscribers (number and percentage change in number, type of subscribers)
- Orders via social media channels (number, percentage change in number, revenue, and percentage change in revenue)
- Information on fans, subscribers, people reached, and people interacting on social media channels (age and gender of users, country, city, language)
- Messages (number of message contacts, percentage of block rate, number and percentage change in new message contacts, number of new blocked connections, number of new reported connections)
Meta fulfills all obligations under the GDPR with regard to the processing of Insights data. ORDAT does not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR. This information is only provided by Meta.
Personal data stored outside Meta in ORDAT's own systems will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may continue beyond this period if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which ORDAT is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Data subjects' rights can be asserted both with ORDAT and with Meta.
To assert the rights of data subjects against ORDAT, a postal letter or email to the data protection officer named in this privacy policy is sufficient.
bb. YouTube
The following information applies to data processing in connection with the use of the ORDAT YouTube channel (hereinafter referred to as the YouTube channel) available at www.youtube.com/c/Ordat.
In addition to this information, please also note YouTube's privacy policy. In particular, information about the social network YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, the processing of data by YouTube when interacting with the YouTube channel, information on the legal basis and purposes of the processing of personal data, and information on data deletion and storage periods at YouTube can be found here:
policies.google.com/privacy
YouTube complies with all obligations under the GDPR with regard to the processing of data collected by YouTube. ORDAT does not make any decisions regarding the processing of analytics data and all other information resulting from Art. 13 GDPR. This information is only provided by YouTube.
YouTube's contact details are as follows:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Phone: +353 1 543 1000
Fax:
Email: support-deutschland@google.com
Authorized representative for Google Ireland Limited within the meaning of Section 5 (1) NetzDG:
Google Germany GmbH
- Legal Department -
ABC-Straße 19
20354 Hamburg
Germany
Contact details of the data protection officer at Google Ireland Limited
support.google.com/policies/contact/general_privacy_form
The data protection supervisory authority for YouTube is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
+353 578 684 800
+353 761 104 800
Online-Formular: forms.dataprotection.ie/contact
https://www.dataprotection.ie/
To exercise their rights vis-à-vis YouTube, users should follow this link: support.google.com/policies/contact/general_privacy_form
(1) Processing of personal data and the nature and purpose of its use
(a) Types of personal data
ORDAT processes the following personal data of users when they interact with the YouTube channel:
- public profile information of the user;
- YouTube Analytics (analysis services for the use of and interaction with YouTube channels) processes further statistical data of YouTube users. YouTube does not provide ORDAT with any personal data. ORDAT only receives numerical evaluations from YouTube on the use of and interaction with the YouTube channel by users.
(b) Legal basis for the processing of personal data
Art. 6 (1) (f) GDPR (protection of legitimate interests)
ORDAT also processes users' personal data to protect its legitimate interests. This is for the following purposes:
- Evaluation of the analyses and statistics of the YouTube channel created and provided by YouTube with regard to user interaction with the YouTube channel
- Communication and interaction via the YouTube channel initiated by users.
ORDAT does not have access to the personal data processed by YouTube as part of Analytics.
cc. Xing
The following information applies to data processing in connection with the use of the ORDAT Xing page available at www.xing.com/pages/ordat (hereinafter referred to as the Xing page).
In addition to this information, please also note Xing's privacy policy. In particular, information about the social network Xing, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, the processing of data by Xing when interacting with the Xing site, information on the legal basis and purposes of the processing of personal data, and information on data deletion and storage periods at Xing are available here:
https://privacy.xing.com/de/datenschutzerklaerung
Xing fulfills all obligations under the GDPR with regard to the processing of data collected by Xing. ORDAT does not make any decisions regarding the processing of analysis data and all other information resulting from Art. 13 GDPR. This information is only provided by Xing.
Die Kontaktdaten von Xing lauten:
New Work SE
Dammtorstraße 30
20354 Hamburg
Deutschland
Tel.: +49 40 419 131 0
Fax: +49 40 419 131 11
E-mail: info@xing.com
Contact details of the data protection officer at New Work SE
https://www.xing.com/support/contact/security/data_protection
The data protection supervisory authority for Xing is:
Free and Hanseatic City of Hamburg
The Hamburg Commissioner for Data Protection and Freedom of Information
Prof. Dr. Johannes Caspar
Ludwig-Erhard-Str. 22
7th floor
20459 Hamburg
Tel.: 040 / 428 54 – 4040
Fax: 040 / 428 54 – 4000
Further information at https://datenschutz-hamburg.de
To assert your rights as a data subject against Xing, please follow this link: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen
(1) Processing of personal data and the nature and purpose of its use
(a) Types of personal data
ORDAT processes the following personal data of users when they interact with the Xing page:
- Public profile information of the user;
- Additional statistical data of Xing users is processed via Xing BrandManager and Recruiter Insights. Xing does not provide ORDAT with any personal data. ORDAT only receives numerical evaluations from Xing on the number of visitors and followers of the Xing page and the number of entries as a desired employer.
(b) Legal basis for the processing of personal data
Art. 6 (1) (f) GDPR (protection of legitimate interests)
ORDAT also processes users' personal data to protect its legitimate interests. This is for the following purposes:
- Evaluation of the analyses and statistics of the Xing page created and provided by Xing with regard to the number of visitors and followers of the Xing page
- Number of entries as desired employer.
ORDAT does not have access to the personal data processed by Xing within the scope of Brand Manager and Recruiter Insights.
dd. Kununu
The following information applies to data processing in connection with the use of the ORDAT Kununu page (hereinafter referred to as the Kununu page) available at www.kununu.com/de/ordat1.
In addition to this information, please also note Kununu's privacy policy. In particular, information about the social network Kununu, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, the processing of data by Kununu when interacting with the Kununu page, information on the legal basis and purposes of the processing of personal, as well as information on data deletion and storage periods at Kununu, can be found here:
https://privacy.xing.com/de/datenschutzerklaerung
Kununu fulfills all obligations under the GDPR with regard to the processing of data collected by Kununu. ORDAT does not make any decisions regarding the processing of analysis data and all other information resulting from Art. 13 GDPR. This information is only provided by Kununu.
Kununu's contact details are as follows:
New Work SE
Dammtorstraße 30
20354 Hamburg
Germany
Tel.: +49 40 419 131 0
Fax: +49 40 419 131 11
E-mail: info@xing.com
Contact details of the data protection officer at New Work SE
https://www.xing.com/support/contact/security/data_protection
The data protection supervisory authority for Kununu is:
Free and Hanseatic City of Hamburg
The Hamburg Commissioner for Data Protection and Freedom of Information
Prof. Dr. Johannes Caspar
Ludwig-Erhard-Str. 22
7th floor
20459 Hamburg
Tel.: 040 / 428 54 – 4040
Fax: 040 / 428 54 – 4000
Further information at https://datenschutz-hamburg.de
To assert your rights as a data subject against Kununu, please follow this link: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen
(1) Processing of personal data and the nature and purpose of its use
(a) Types of personal data
ORDAT processes the following personal data of users when they interact with the Kununu website:
- public profile information of the user;
(b) Legal basis for the processing of personal data
Art. 6 (1) (f) GDPR (protection of legitimate interests)
ORDAT also processes users' personal data to protect its legitimate interests. This is done for the following purposes:
- Evaluation of the analyses and statistics of the Kununu site created and provided by Kununu with regard to the number of visitors and followers of the Kununu site
- Number of entries as desired employer.
ORDAT does not have access to the personal data processed by Kununu within the scope of Brand Manager and Recruiter Insights.
ee. LinkedIn
This privacy policy applies to data processing in connection with the use of the ORDAT LinkedIn page (hereinafter referred to as the LinkedIn page) available at www.linkedin.com/company/ordat-gmbh-&-co-kg.
In addition to this privacy policy, please also note LinkedIn's privacy policy. Information about LinkedIn's processing of data when interacting with the LinkedIn page, the legal basis and purposes of processing personal data, and information about data deletion and storage periods at LinkedIn can be found here:
https://de.linkedin.com/legal/privacy-policy
(1) Data protection controller
The controller for data processing pursuant to Art. 26 GDPR is:
If ORDAT and LinkedIn are joint controllers pursuant to Art. 26 (1) GDPR, the agreement concluded between ORDAT and LinkedIn, which can be accessed via the following link, applies.
https://legal.linkedin.com/pages-joint-controller-addendum
The contact details for LinkedIn are:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
Contact details for the data protection officer at LinkedIn Ireland Unlimited Company:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO
The data protection supervisory authority for LinkedIn is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
+353 578 684 800
+353 761 104 800
Online form: https://forms.dataprotection.ie/contact
https://www.dataprotection.ie/
To exercise their rights vis-à-vis LinkedIn, users should follow this link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
(2) Processing of personal data and the nature and purpose of its use
a. Types of personal data
ORDAT processes the following personal data of users when they interact with the LinkedIn page:
- public profile information of the user;
- personal data specified in posts;
- personal data provided in comments;
- personal data provided in messages when contacting ORDAT via LinkedIn;
- additional user data is processed via LinkedIn Insights (analysis services for the use of and interaction with LinkedIn pages). LinkedIn does not provide ORDAT with any personal data. ORDAT only receives numerical evaluations from LinkedIn on the use of and interaction with the LinkedIn page by users.
Further information about the processing of Insights data when interacting with the LinkedIn page is available here: https://legal.linkedin.com/pages-joint-controller-addendum
b. Legal basis for the processing of personal data
i. Legal bases and purposes of ORDAT
Art. 6 (1) (b) GDPR (performance of a contract, implementation of pre-contractual measures)
ORDAT processes users' personal data for the purpose of fulfilling contracts that have been concluded with users or for the implementation of pre-contractual measures. Personal data is made available to ORDAT when users
- ask questions about ORDAT's services via the LinkedIn page or
- request other information via the ORDAT LinkedIn page.
If necessary for processing a request, the user's data will be passed on internally.
ORDAT points out that it is not permitted to submit applications via the LinkedIn page. ORDAT will not process any applications submitted via the LinkedIn page. An application tool is available on ORDAT's websites for submitting applications, which should be used. For this purpose, please refer to ORDAT's website at the URL www.ordat.com. Applications submitted via the LinkedIn page will be deleted immediately.
The type of data processed depends on the data that the user provides to ORDAT. As a rule, this includes the following data:
- First name, last name
- Title
- Employer
- Position
- City, state
- Personal data provided by the user when contacting us.
Art. 6 (1) (f) GDPR (protection of legitimate interests)
ORDAT also processes users' personal data to protect its legitimate interests. This is done for the following purposes:
- Evaluation of the analyses and statistics of the LinkedIn page created and provided by LinkedIn with regard to user interaction with the LinkedIn page
- Improvement of the LinkedIn page in terms of its user-friendliness and attractiveness, as well as the implementation of user-oriented marketing measures
- Communication and interaction via the LinkedIn page opened by users.
ORDAT does not have access to the personal data processed by LinkedIn as part of Insights, but only to that contained in the summarized page insights. These are the following evaluations, each within a specific period:
- Current followers of the LinkedIn page (with current workplace, date on which the page was followed, location, job function, length of service, industry, company size)
- Breakdown of visitors (with time of website visit, job function, location, length of service, industry, and company size)
Further statistical data on LinkedIn members and visitors is processed. LinkedIn does not provide ORDAT with any other personal data. ORDAT only receives numerical evaluations from LinkedIn on the use of and interaction with the LinkedIn page.
LinkedIn fulfills all obligations under the GDPR with regard to the processing of Insights data. ORDAT does not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR. This information is only provided by LinkedIn.
ii. Legal basis and purposes of LinkedIn
Information on the legal basis and purposes of the processing of personal data by LinkedIn, as well as the essentials of the Insights supplement, can be found here:
- LinkedIn Privacy Policy:https://de.linkedin.com/legal/privacy-policy
- Information on Page Insights:https://legal.linkedin.com/pages-joint-controller-addendum
4. User rights
You have the following rights vis-à-vis ORDAT with regard to your personal data:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
You can send any requests to the contact details listed in section 5 at any time.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
5. Storage and deletion
We will delete your personal data once it is no longer necessary to store it, or restrict its processing if there are legal storage obligations.