Data Protection

The responsible party

The responsible party according to Article 6(7) of the EU General Data Protection Regulation (GDPR) is Scholz & Volkmer GmbH (hereinafter referred to as S&V), represented by its Managing Directors Peter Post and Michael Volkmer, Schwalbacher Straße 72, D-65183 Wiesbaden, Germany, Telephone +49 (611) 180 99-0, Fax +49 (611) 180 99-77, E-mail: office@s-v.de (see also Imprint).

You can reach our Data Protection Officer at datenschutz@s-v.de or by sending a letter to our postal address to "Mr York Freiling (Lawyer), Data Protection Officer".


Information about the collection of personal data

S&V respects the privacy of all persons who visit our website. In the following, we provide information on the collection of the personal data of our website users. Personal data is all the data that can be related to you personally, e.g. your name, address, e-mail addresses or user behaviour.
If we involve contracted third-party providers in individual functions at our website or want to use your data for advertising purposes, the applicable procedures are described in detail below. We also describe the fixed criteria for the duration of data storage. 
Unless specific exceptions regarding the processing of personal data are explicitly stated in our Data Privacy Policy, the data stored by us is deleted as soon as it is no longer required for its intended purpose and providing that there are no legal obligations to retain the data that prevent us from deleting it. If personal data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. That is, such data is blocked and not processed for other purposes. This rule applies, e.g., to personal data that must be retained for reasons associated with commercial or tax law (six years in accordance with Section 257, Paragraph 1 of the German Commercial Code (HGB) and ten years in accordance with Section 147, Paragraph 1, of the German Fiscal Code (AO).


Collection of the personal data of website users

When you use the website for information purposes only, that is, if you do not register or provide us information in any other way, we only collect the personal data transmitted by your browser to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure adequate stability and security (the legal basis is Article 6(1)(1)(f) of the GDPR):
•    IP address
•    Date and time of the request
•    Time zone difference from Greenwich Mean Time (GMT)
•    Content of the request (exact web page accessed)
•    Access status/HTTP status code
•    Data volume transmitted in each case
•    Website generating the request
•    Browser
•    Operating system and its interface
•    Language and version of the browser software
The data is stored for a period of fourteen days and then deleted.


Use of cookies



Use of Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymisation is activated at this website, Google will previously truncate your IP address within the Member States of the European Union and within other areas that have signed up for the Agreement on the European Economic Area. The full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to draw up reports about website activities and to provide additional services related to the use of the website and of the Internet to the website operator.
The IP address transmitted by your browser within the framework of Google Analytics is not combined with other Google data.
You can prevent the storage of cookies by activating the relevant setting in your browser software. Please note, however, that if you do this, you might not be able to fully use all the functions of this website. Another way of preventing Google from collecting and processing data generated by cookies about your use of the website (incl. your IP address) is to download and install the browser plug-in available at the following link. http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are truncated before further processing, which means that they cannot be traced back to a specific person. If the data collected about you includes a direct reference to you, this reference is therefore immediately removed, thus instantly deleting personal data.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases where personal data is transferred to the US, Google has declared that it adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The legal basis for the use of Google Analytics is Article 6 (1)(1)(f) of the GDPR.
Information on the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1)5850 – 436 13 1001
User conditions: http://www.google.com/analytics/terms/de.html, 
Privacy overview http://www.google.com/intl/de/analytics/learn/privacy.html
as well as the Data Privacy Policy http://www.google.de/intl/de/policies/privacy.


Integration of Google Maps 

We use the Google Maps service at this website. This allows us to show you interactive maps directly at the website and enables you to conveniently use the map function.

When you visit the website, Google is informed that you accessed the specific sub-page of our website. In addition, the data specified in the "Collection of the personal data of website users" Section of this Policy are transmitted. This happens regardless of whether you are logged in via a Google user account or whether no such user account exists. If you are logged into Google, your data is directly linked to your account. If you do not want this data to be linked with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or for the demand-oriented design of its website. The aim of compiling these profiles is, in particular, to customise advertising (even for users who are not logged in) and to inform other users of the social network about your activities at our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
For more information on the purpose and scope of data collected and its processing by the plug-in provider, please refer to the provider's Data Privacy Policy. It also provides further information about your rights in this regard and information on settings that you can use to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has declared that it adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for the use of Google Maps is Article 6(1)(1)(f) of the GDPR.
 

Use of Vimeo plug-ins

We use the provider Vimeo to integrate videos into the website. Vimeo is operated by Vimeo, LLC, which is headquartered at 555 West 18th Street, New York, New York 10011, USA. 
We use plug-ins by the provider Vimeo at our website. If you call up a page of our website that contains such a plug-in – for example, our media library – a connection to the Vimeo servers is established in order to display the plug-in. Thus, the Vimeo server is sent information on which of our Internet pages you have visited. If you are logged in as a Vimeo member, Vimeo assigns this information to your personal user account. When you use the plug-in, e.g. when you click on the start button of a video, this information is also assigned to your user account. You can prevent this information from being assigned to your account by logging out of your Vimeo user account before using our website and by deleting the corresponding cookies set by Vimeo.
For more information on data processing and on data privacy provided by Vimeo, please refer to: https://vimeo.com/privacy. The legal basis for the use of Vimeo is Article 6(1)(1)(f) of the GDPR.
 

E-mail contact

When you contact us by e-mail, we store the data you provide (your name, address, e-mail address, telephone number, if applicable) in order to answer your questions. The legal basis for this is Article 6(1)(1)(b) of the GDPR. We delete the data we have stored in conjunction with e-mail contacts after  storage is no longer required or restrict processing of it if we are required to retain it by law.
Opt-out option: possibility to have you data removed 
When you send us an enquiry, you can at any time object to us using your data in the future. For this purpose, you can send an e-mail to datenschutz@s-v.de or notification in writing to Scholz & Volkmer GmbH,  Data Protection Officer, Schwalbacher Straße 72, D-65183 Wiesbaden or by fax to +49 (611) 180 99-77. This will result in your request not being (further) processed. 
 

Newsletter registration and consent

You can register directly at our website for our newsletter, in which we inform you about agency-related, promotional news about S&V, e.g. projects, new customers, personal data, awards or comments. We send our monthly newsletter by e-mail only with the consent of recipients or with legal permission. By subscribing to our newsletter, you agree to receive it and consent to the described procedures. The legal basis for this is Article 6(1)(1)(a) of the GDPR. 
Registration for our newsletter involves a so-called double opt-in process. This means that your registration is only completed once you have confirmed your registration by responding to a confirmation e-mail sent to you for this purpose. This confirmation requires you to click on the link contained therein. If  we do not receive this confirmation, your registration will be automatically deactivated in our database and deleted at the deadline for legally retaining data at the latest. Subscriptions to the newsletter are recorded so that we can prove that the subscription process complies with legal requirements. This includes saving the time of registration and time of confirmation as well as the IP address. The only information that is required to send the newsletter is your e-mail address. Your e-mail address is collected in order to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or of the e-mail address used. The legal basis for this is Article 6(1)(1)(f) of the GDPR. This data will be deleted as soon as it is no longer required for the purpose for which it was collected. Accordingly, your e-mail address will be stored as long as your subscription to the newsletter remains active. 

Opt-out option: possibility to have your data removed 
You can cancel your subscription to the newsletter at any time. For this purpose, there is an unsubscribe link in every newsletter. Alternatively, you can send an e-mail to office@s-v.de or notification in writing to the contact details provided in the Imprint.
 

Use of MailChimp


We send our newsletter using the service provider MailChimp to optimize its dispatch and presentation. MailChimp is an e-mail marketing service provided by the operator Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. MailChimp uses the data of our newsletter recipients in the form of pseudonyms to improve its own services. For more information on the purpose and scope of data collection and processing by MailChimp, please refer to the service provider’s Data Privacy Policy: https://mailchimp.com/legal/privacy/. MailChimp processes your personal data in the USA and has declared that it adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
The legal basis for the use of data by MailChimp is Article 6(1)(1)(f) of the GDPR. 
 

Use of social media plug-ins

We currently use the following social media plug-ins: Facebook, Twitter, Xing, LinkedIn. For this purpose, we use the so-called two-click solution. This means that when you visit our site, your personal data is not initially passed on to the providers of the plug-ins. You can identify the provider of a plug-in based on the mark on the box above its initial letter or logo. We provide you with the option of communicating directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have called up the respective page of our online presence. In addition, the data specified in the " Collection of the personal data of website users" Section of this Data Privacy Policy are transmitted. In Germany, the providers Facebook and Xing have declared that they anonymise the IP address immediately after collection. When the plug-in is activated, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects data in particular using cookies, we recommend that you delete all cookies using your browser's security settings before clicking on the greyed-out box.
We have no control over the data collected and the data processing operations and we do not have knowledge of the full extent of data collection, the purposes of the processing and the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles which are used for purposes of advertising, market research and/or for the demand-oriented design of its website. The aim of such analyses is, in particular, (also for users who are not logged in) to customise advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles. To exercise this right, you must contact the respective plug-in provider. With the plug-ins, we offer you the opportunity to interact with the social networks and other users, enabling us to improve our offer and make it more interesting for you as a user. The legal basis for the use of plug-ins is Article 6(1)(1)(f) of the GDPR.
The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, the data collected from our website is directly assigned to your account with the plug-in provider. If you click on the activated button and, e.g., create a link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button. This will enable you to prevent the information from being assigned to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and its processing by plug-in providers, please refer to their Data Privacy Policies below. These policies also contain further information about your rights in this regard and setting options for protecting your privacy.

 

Addresses of the respective plug-in providers and the URLs with their Data Privacy Policies:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA http://www.facebook.com/policy.php; more information on data collection: http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has declared that it adheres to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework,
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA https://twitter.com/privacy. Twitter has declared that it adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework,
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

Xing AG, Gänsemarkt 43, 20354 Hamburg, DE
http://www.xing.com/privacy.

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA http://www.linkedin.com/legal/privacy-policy.
LinkedIn has declared that it adheres to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework
https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
 

Data processing within the context of our agency services

As an agency, we process the data of our customers in the context of the specific contractual services we provide. This involves various data processing operations, depending on the assignment. We use the contact data, bank details and order-related data provided by our customers exclusively for the purpose of fulfilling our contractual obligations towards customers as well as for executing contracts, unless we separately specify further uses of the data. The legal basis for data processing is Article 6(1)(b) of the GDPR. Data will only be passed onto third parties if this is necessary to fulfil our contractual obligations. Unless otherwise agreed with our customers, we delete data that we have stored in such a context when storage is no longer necessary, usually after expiry of contractual or legal claims by us or by our customers. Alternatively, we restrict processing of the data if we are obligated to retain it by law.


Opt-out option: possibility to have your data removed

Our customers can at any time object to us using their data in the future. For this purpose, you can send an e-mail to datenschutz@s-v.de or notification in writing to Scholz & Volkmer GmbH, Data Protection Officer, Schwalbacher Straße 72, D-65183 Wiesbaden or by fax to +49 (611) 180 99-77. This may mean that the order can no longer be carried out or can only be carried out to a limited extent if our contractual services to the customer have not yet been entirely fulfilled.
 

Data processing in the context of your job application

When you send us your application documents, you are transmitting personal data to us that have special protection under German law. 
We process personal data about you for the purpose of checking your application for a position in the agency to the extent that it is necessary for us to make a decision on whether to establish an employment relationship with you. The legal basis for this is § 26(1) in conjunction with § 26(8)(2) of the German Federal Data Protection Act (BDSG). When we check applications, we may call, write or email you if we have questions and if you have provided contact information. Furthermore, we may process your personal data if this is necessary for us to defend ourselves legal claims against us related to the application process. The legal basis for this is Article 6(1)(f) of the GDPR. If an employment relationship is established between you and us, we may, in accordance with § 26(1) of the German Federal Data Protection Act (BDSG), further process the personal data already received from you for the purposes of the employment relationship if this is necessary for managing or terminating the employment relationship or for exercising or fulfilling the rights and obligations of the body representing employees resulting from a law. You are neither legally nor contractually obligated to provide personal data. However, you are required to provide personal data for the conclusion of a contract of employment with us.

We process data related to your application. This may be general personal data (such as name, address and contact details), information about your professional qualifications and school education or information about further professional training or other information that you provide with your application. In addition, we may process job-related information that you have made publicly available, such as information in a profile on professional social media networks. The employees tasked with processing such information are bound to maintain confidentiality and data secrecy in accordance with Article 5(1) of the GDPR. We do not share your data with third parties.
The data you provide to us is initially only processed and stored while we evaluate your application and is deleted after the evaluation has been completed if it is no longer required. The latter is the case, for example, if we decide on the basis of your applicant profile that your application could be of interest at a later date; in this case, we initially store your information for 6 months so that we can contact you again at a later date. If your application does not result in an employment relationship between you and us, we may also continue to store your data if this is necessary to defend ourselves against possible legal claims.


Right to information and deletion of application data

Upon request, we will provide you with information about which data we have stored about you. If you wish us to stop storing your data, you can inform us of this before the aforementioned time limit for storage and deletion is reached; we will then delete your data immediately.
 

Your rights

With regard to personal data about you, you have the right with respect to us:

  • to revoke any consent you may have given us at any time in accordance with Article 7(3) of the GDPR. As a result, we will no longer be authorised to continue processing the data to which the consent was related in the future;
  • to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or opt-out, the existence of a right of complaint, the origin of your data if it was not collected by us as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • to immediately demand the correction of incorrect data or completion of your personal data stored by us, in accordance with Article 16 of the GDPR;
  • to request that your personal data stored by us is deleted, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the enforcement, exercise or defence of legal claims, in accordance with Article 17 of the GDPR;
  • to request that the processing of your personal data is restricted, in accordance with Article 18 the GDPR, if you contest the accuracy of the data or if its processing is unlawful, but if you object to it being deleted and we no longer require the data, but you need it to enforce, exercise or defend legal claims or you have objected to its processing in accordance with Article 21 of the GDPR;
  • to receive the personal data that you provided to us in a structured, standard and machine-readable format or to request that it is transferred to another responsible party, in accordance with Article 20 of the GDPR. 

In addition to any opt-out options set out above, you can contact us by e-mail at datenschutz@s-v.de or by letter to Scholz & Volkmer GmbH,  Data Protection Officer, Schwalbacher Straße 72, D-65183 Wiesbaden or by fax at +49 (611) 180 99-77 if you wish to exercise your rights as a data subject, in particular your right to opt out. You also have the right to lodge a complaint with a data protection supervisory authority (in the state of Hesse) about the processing of your personal data by us.
 

Current validity and change of this Data Privacy Policy

This privacy policy is currently valid and has the status as of May 2018. 
Due to the further development of our website and services provided by it or due to changed legal or regulatory requirements, it may become necessary to change this Data Privacy Policy. You can access and print out the current Data Privacy Policy at any time at our website under the menu item "Data Privacy".