In the interest of both parties, we take our task of ensuring the confidentiality of your data within the framework of the applicable provisions of data privacy law very seriously. We use modern techniques to conduct the dialogue with you via the Internet and to secure your data.
For us, the Internet is an important sales, information and contact channel to our customers, business partners and, via the career site, also to our applicants. Nevertheless, many users of the Internet are still very often uncertain and distrustful about whether and which of their personal data is being processed by whom. We would like to dispel these reservations. The protection of the personal rights of our customers and business partners and the security of your personal data is of utmost importance to us. You can rely on this. Accordingly, the principle of data avoidance and data security has top priority for us.
With the help of the following guidelines, we would like to make the subject of data collection, processing, use and storage transparent to you and answer as many questions as possible about data privacy in connection with our Internet presence.
If you are interested in our company as an employer and apply for a job advertisement via our applicant portal, supplementary data privacy regulations apply, which are automatically made available to you during the application process.
Should any questions remain unanswered or if you would like to find out about specific individual questions, please send us an e-mail to
datenschutz@alte-leipziger.de or datenschutz@hallesche.de.
This declaration on data privacy applies to all our Internet pages. Insofar as legally binding declarations are made in the name of the ALH Group in the following, they apply equally to all companies belonging to the ALH Group. Insofar as our Internet pages contain hyperlinks or references to other Internet pages, no responsibility is assumed for the data privacy principles and possible breaches of data privacy that occur when visiting and using these Internet pages.
Our Internet presence may contain links to websites of other providers (external links) to which this data privacy declaration does not apply. These websites are subject to the liability of the respective operators. Should you notice that links on our Internet presence refer to websites whose contents violate applicable law, please notify us by sending an e-mail to datenschutz@alte-leipziger.de or datenschutz@hallesche.de. We will then immediately remove these links from our Internet presence. The companies in the ALH Group accept no responsibility for the topicality, correctness, completeness or quality of the information provided.
The person responsible in accordance with Art. 4 section 7 GDPR and other national data privacy laws of the member states of the European Union and other data privacy regulations is
|
for the Alte Leipziger companies 61440 Oberursel tel. 06171 66-00 fax 06171 24434 |
for the Hallesche Hallesche Krankenversicherung a.G. Reinsburgstraße 10 70178 Stuttgart tel. 0711 6603-0 fax 0711 6603-333 |
The processing of personal data during your visit to our website is always based on data privacy regulations. These include in particular the EU-Datenschutz-Grundverordnung (GDPR) (= EU General Data Privacy Regulation as well as the Bundesdatenschutzgesetz (BDSG) (= Federal Data Protection Act) and the Versicherungsvertragsgesetz (VVG) (= Insurance Contract Act). Insofar as the Internet is also used to offer products, the provider as a teleservice provider is also subject to the legal provisions of the e-Privacy-Regulation and the Telemediengesetzes (TMG) (= e-Privacy Regulation and the Telemedia Act) within the framework of the provider-user relationship. The legal requirements of these legal provisions in the currently valid version are also taken into account within the framework of the Internet presence of the ALH Group - insofar as they are relevant
During your visit to our website, you can navigate freely on our generally accessible web pages without disclosing any personal information. When you visit our website for purely informational purposes, only the data that your browser transmits to our servers is collected. This includes the domain name and the IP address assigned to you by your Internet provider, the operating system of your PC and your browser type. The website from which you visit us, the websites that you visit on our site and the time of access are also automatically stored for a maximum of seven days. The legal basis for the temporary storage of this data in log files is Art. 6 section 1 lit. f GDPR and is for the purpose of maintaining IT security. This data processing is absolutely necessary for the operation of our Internet pages, and in this respect there is no possibility of objection. Conclusions about your person and the creation of user profiles are not possible. In particular, you can make use of our tariff and premium calculators without providing personal data. In order to receive an individual product offer, to make a purchase or a contract or to contact us via a contact form, we need your personal data. You provide this information voluntarily and it will only be forwarded to us with your express consent. Areas of our website where personal data is collected are secured by SSL encryption. If you use this opportunity to contact us, your details will be processed and automatically stored for the purpose of answering your inquiry in accordance with Art. 6 section 1 lit. c GDPR. We will delete the inquiries if they are no longer necessary and no legal archiving obligations apply.
2.2 Special access data
When you use one of our various service offers, such as changing your address, reporting a claim or other ways of contacting us, the personal data entered in these forms is transmitted from your PC in encrypted form according to internationally recognized security standards (SSL) to protect it against misuse by third parties.
In addition, certain Internet pages that are not generally accessible require personal authorization with an individual user ID and password in order to be able to access the data relating to their respective business area.
You have the possibility to cancel your user account at any time. In this case, your data will be deleted, unless we are obliged to keep it for reasons of commercial or tax law. The legal basis for the processing of the data is Art. 6 section 1 lit. a GDPR, if you have given your consent. If the registration serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 section 1 lit. b GDPR.
We process the data provided by you exclusively for the intended purpose, on the basis of Art. 6 section 1 lit. f GDPR. You decide which personal data we receive and for what purpose we may process it. The data will only be passed on to third parties within the framework of mandatory legal regulations or under the conditions mentioned under 5.
The GDPR always requires your consent as the basis of legitimacy for the processing of personal data, unless other admissibility requirements specified in Article 6 of the GDPR are met. Personal data will only be collected and processed during and after your visit to the Internet with your express consent. This consent or declaration of consent can be revoked at a later date at any time with future effect without giving reasons to the ALH Group. Our contact details can be found in the legal imprint of our website.
Insofar as data is processed by external service providers within the scope of order processing, these are not considered third parties under data privacy law. With regard to data processing, they are nevertheless obliged to comply with the provisions of Art. 28 GDPR and are subject to our right to issue instructions. Personal data will only be passed on to intermediaries for the purpose of processing your inquiries or to support and advise you on insurance matters. Every agent is legally and contractually obliged to observe the provisions of the GDPR and the obligations of confidentiality. Health data will only be passed on after their prior consent. You will be informed of the agent responsible for your care. If his activity for our company ends (e.g., by termination of the brokerage contract or by leaving the company), the company will reorganize your support; you will be informed accordingly. Otherwise, personal data will only be passed on to third parties in the narrow cases prescribed by law or if you have given us your express permission to do so.
In the above-mentioned cases of passing on your personal data to third parties, we naturally respect your right to object to this at any time.
We only pass on data to service providers within the EU in the context of order processing. We only allow your data to be processed in a third country if the special requirements of Art. 44 ff. GDPR are fulfilled. The data may then only be processed on the basis of special guarantees, such as the EU Commission's officially recognized determination of a level of data privacy corresponding to that of the EU or compliance with officially recognized special contractual obligations, the so-called "standard contractual clauses". We require U.S. service providers to use these standard clauses or to comply with the "privacy shield", the data privacy agreement negotiated between the European Union and the United States (privacyshield.gov).
The legislator has standardized a wide range of obligations and periods of storage for personal data. After these periods have expired, the corresponding data is routinely deleted. If data is not affected by this, it is deleted when the purposes mentioned under No. 3 cease to apply. If data has been passed on to other bodies in a permissible manner, they will be informed of this and advised of the obligation to delete it. Insofar as deletion is contrary to legal, statutory or contractual retention periods or the deletion conflicts with the interests of the person concerned that merit protection, such data will be blocked. Data is blocked by marking stored personal data in order to restrict its further processing or use.
In this respect, the stored personal data is regularly checked to determine whether it is still necessary for the specific purpose of storage.
7.1 Rights on information
You have the right to receive information free of charge about the data stored about you. On request, we will provide you with information about your personal data in writing - also online if you wish - to the extent permitted by law. This information includes in particular whether personal data has been stored. If this is the case, the information extends to the processing purposes, the categories of personal data processed, the data recipients, the storage period, the origin of the data and the reference to existing rights (see following sections). If an automated decision-making process exists, information must be provided on the logic involved, the scope and the intended consequences of the processing for the data subject The right of access can only be exercised by the data subject himself and exclusively with regard to data collected, processed or used by him.
7.2 Right of Rectification
If the personal data processed are incorrect or incomplete, the data subject shall have the right to rectify or complete them.
7.3 Right to erasure ("right to be forgotten")
Under the conditions stated in Article 17 GPDR(§ 35 BDSG Federal Data Protection Act) you can request the deletion of personal data. Accordingly, personal data must be deleted if, among other things, the purpose of processing no longer applies, the data has been processed unlawfully or the previously granted consent is revoked. The precondition for this is, however, that the deletion is not contrary to public interests or legal obligations. If we have made public the personal data concerning you and we are obliged to delete them, we will take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have requested them to delete all links to these personal data or copies or replications of these personal data.
7.4 Right to limit processing
If the person concerned by the processing of his personal data disputes the accuracy of the data, he has the right to request a restriction of the processing for the duration of the verification. This also applies if the processing was carried out unlawfully and the data subject refuses the deletion. A further case of application arises if the purpose of processing no longer applies, but legal claims still stand in the way of deletion. After a processing restriction has been imposed, the data subject must be informed before the restriction is lifted. If you have any further questions regarding the processing of your personal data, you can contact the contact point listed under 9.2 at any time, in particular our company data privacy officer.
7.5 Right to data transferability
Every person concerned, has the right to obtain from the person, responsible for the processing of his personal data, the data relating to him, which he has previously made available to the responsible person, in a structured, standard and machine-readable format, and to have it transmitted to another responsible person. Where technically possible, direct transfer from one responsible person to another may also be obtained.
7.6 Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data, which is carried out on the basis of Art. 6 paragraph 1 lit. e or f GDPR. If we process your data for the purpose of direct advertising, you may object to the processing of your data for the purpose of such advertising at any time if reasons arise from your particular situation that speak against data processing.
7.7 Automated decisions in individual cases including profiling
You have the right, not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on you or which significantly affects you in a similar way. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and us, is permitted by law or is made with your express consent.
7.8 Right to appeal to a supervisory authority
You have the right to complain to a supervisory authority, in particular in the member state of your residence, your place of work or the place of the suspected violation, if you believe that the processing of personal data concerning you is in violation of the GDPR.
Furthermore, the data processing network of the ALH Group is protected by a firewall system according to the current state of the art from and to the outside. This ensures sufficient access, entry and access control to protect your inventory, usage and content data against manipulation, loss and destruction.
Data security is an important concern for us, which we ensure by continuous support of the systems used and by qualified personnel. In particular, we adapt our protective measures to further developed or new reliable security systems according to our possibilities. In this respect, we reserve the right to make changes and additions. In view of the many risks associated with the use of the Internet, there can be no completely unlimited security.
9.1 Monitoring
The ALH Group undertakes to comply with the above-mentioned principles of data privacy and data security as described. We regularly monitor compliance with these data privacy principles within the Group and their conformity with the requirements of data protection law. In addition, we ensure, both through our company data privacy officer and our internal organization, that personal data is only used to the extent permitted by law.
However, the ALH Group reserves the right to change these data privacy principles if necessary. We will indicate the status of the changes or revision at the beginning of our data privacy declaration.
9.2 Data Privacy Officer, Information and Complaints Office in the Group
If you have any further questions, please do not hesitate to contact the ALH Group, which will be happy to assist you with its expert team.
As contact person for data privacy, you can also contact the responsible data privacy officer, who is not bound by instructions in the fulfilment of his duties. His tasks include in particular monitoring compliance with the GDPR and other regulations on data privacy. You can contact our data privacy officer at the e-mail address datenschutz@alte-leipziger.de or datenschutz@hallesche.de
The ALH Group also offers a range of online apps (e.g., video consultancy, software apps [apps]). The following provisions also apply to apps in addition to the general data privacy regulations.
When you visit our website, information about the websites you visit is generated by the web server and sent to the web browser/app and stored there (“web cookies”). This is designed to optimise and further develop the web applications and to continuously improve our communication with you based on your usage behaviour. The data collected is data that originates from you and which you generate yourself during your communication with the relevant server. Web cookies are not hidden and can be viewed by the user. No additional data is collected.
10.1 What is stored in cookies?
We save the data on the individual access to the pages of our online apps which your browser/app transmits when you visit the website or use the app for statistical purposes to improve the quality and security of our service. The server logs contain data including your web request/usage, your IP address, browser type, browser language, date and time of your request and one or several cookies which may be used to uniquely identify your browser, for general information, e.g. when errors occur, and information arising from security events (change of password, password recovery, change of email address, change of mobile phone number), as these are required to use our services. The IP address is saved truncated in accordance with the relevant data privacy regulations.
When you visit our website, and as part of the provision of our services, the website sends one or more cookies to your computer or other device which uniquely identifies the browser. We use cookies to improve the quality of the website, including to store usage preferences and to track user trends. We may set one or several cookies in your browser when you visit the website or subpages. You can change the settings of your browser to notify you when a cookie is sent. This gives you the option to either accept or reject a cookie. The data collected and analysed by us is used to improve the services and the website, to personalise the web experience and to facilitate the login process if the login cookies are set permanently.
We use third-party service providers to assess the efficiency of our apps and services and to analyse how you use the app and/or services. We may therefore use tracking pixels (web beacons) on the pages or in the app, which the third-party providers make available to our analytics systems for this purpose. The information we collect includes, for example, the number of pages visited, browsing patterns and similar data. The data collected using statistics enables us to ascertain which services within the app are the most interesting for users and which offers users prefer to view. Although the provider logs the data originating from our website on our behalf, we control how this data can and cannot be used.
When you visit our website, a cookie message is displayed to obtain your consent. If you consent to the use of cookies, the cookie will be set in your browser for one year and the cookie message will no longer be displayed. We use the CookieConsent service provided by Unsercentrics. The legal basis for processing personal data using cookies is Article 6, Paragraph 1, Sentence 1, Letter a) GDPR. You can also withdraw your consent at any time with effect for the future by configuring your cookies using the privacy button in the lower left corner of this page.
10.2 Avoidance/deletion of cookies
Most browsers accept cookies, but you can also configure the browser to reject all cookies. You can, however, delete cookies at any time.
You may, of course, object to the use of our cookies and third-party cookies at any time by configuring your Internet browser such that it does not accept cookies. For more details, please refer to the help function of your Internet browser. However, if you do this, please note that you may not benefit from the full functionality of the app/services.
10.3 Use of the "visitor action pixel" of Facebook
We use the "Facebook pixel" provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") which uses visitor actions to evaluate and support online marketing measures. We use the Facebook pixel to track the actions of users after they have seen or clicked on a Facebook ad. This enables us to log the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymised, so we are unable to view the personal data of individual users. However, this data is stored and processed by Facebook, and we will inform you of the extent of such storage based on our own knowledge. Facebook may associate this data with your Facebook account and also use it for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy). Personal data may then be transferred to servers in the USA. If you accept the corresponding cookie, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR. Please note that the United States has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. The legal basis for the processing is Article 6, Paragraph 1, Sentence 1, Letter a) GDPR and Article 49, Paragraph 1, Sentence 1, Letter a GDPR. You can allow Facebook and its partners to place advertisements on and outside Facebook. A cookie may also be stored on your computer for these purposes. Please change your ads settings on Facebook if you wish to withdraw your consent (https://www.facebook.com/settings). Consent may only be granted by users aged 13 years or above. If you are under 13 years of age, please consult your legal guardian for advice.
10.4 Use of Facebook Website Custom Audiences
We also use communication tools provided by the social network Facebook on our website, in particular the remarketing or "Custom Audience" function. We use this function to display targeted ads to visitors to our website such that personalised, interest-based ads are enabled when they visit Facebook. Facebook also uses cookies to analyse website usage. which then forms the basis for the creation of interest-based ads. Facebook therefore saves a small file with a sequence of numbers in the browsers of the visitors to our website. This number is used to log visits to the website and to generate anonymised data on website usage. Personal data may then be transferred to servers in the USA. If you accept the cookie, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR. Please note that the United States has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a) GDPR.
If you no longer wish to receive interest-based ads on Facebook, you can adjust the settings in your Facebook account. Please follow the instructions under the link: http://www.facebook.com/ads/website_custom_audiences/.
You can also withdraw your consent at any time with effect for the future by configuring your cookies using the privacy button in the lower left corner of this page.
10.5 LinkedIn Insight Tag and conversion tracking
We use the “LinkedIn Insight Tag” on our website, a conversion tool provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
We use this tool to display targeted ads to visitors to our website such that personalised, interest-based ads are displayed when they visit the "LinkedIn” networking platform. LinkedIn uses cookies to analyse website usage, which forms the basis for the creation of interest-related ads.
The following data is logged:
- IP address
- Device and browser properties
- Page events (page views)
- Demographic data from LinkedIn (if the user is a LinkedIn member)
Personal data may then be transferred to the servers of LinkedIn Corp., 1000 W. Maude Avenue, Sunnyvale, CA 94085, located in the USA. If you accept the cookie, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR. Please note that the United States has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a) GDPR.
If you no longer wish to receive interest-based ads in LinkedIn, you can adjust the settings in your LinkedIn account. Please follow the instructions under the link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. For more information on privacy, please visit: https://www.linkedin.com/legal/privacy-policy.
10.6 Use of Google Adwords conversion tracking
We use the online ad program "Google AdWords" and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analytics service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an ad placed by Google, a conversion tracking cookie will be placed on your computer. Personal data may then be transferred to servers in the USA. If you accept the cookie, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR. Please note that the United States has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a) GDPR. If you visit certain Internet pages on our website and the cookie has not yet expired, we and Google can see that you clicked on the ad and were directed to this page. Every Google AdWords customer receives a different cookie, which means that cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. This enables customers to view the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. If you do not wish to participate in tracking, you can set your browser software accordingly (opt out) to object to the use of such and therefore prevent the installation of cookies. You can also withdraw your consent at any time with effect for the future by configuring your cookies using the privacy button in the lower left corner of this page. You will then not be included in the conversion tracking statistics. You can find further information and the Google privacy policy at http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/
10.7 Use of the remarketing or "Similar Target Groups" feature of Google Inc.
The provider uses the Remarketing or "Similar target groups" function of Google Inc. ("Google") on the website. The provider uses this function to display targeted ads to visitors to the website, such that personalised, interest-based ads are enabled when they visit other websites in the Google Display Network. Google uses cookies to analyse website usage, which forms the basis for the creation of interest-based ads. Google therefore saves a small file with a sequence of numbers in the browsers of the visitors to our website. This number is used to log visits to the website and to generate anonymised data on website usage. Personal data may then be transferred to servers in the USA. If you accept the cookie, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR. Please note that the United States has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a) GDPR.If you then visit another website in the Google Display Network, ads will be displayed that are likely to reflect the product and information areas you have accessed previously. You can follow the link below to download and install the plugin to permanently deactivate the use of cookies by Google: https://www.google.com/settings/ads/plugin. You can also withdraw your consent at any time with effect for the future by configuring your cookies using the privacy button in the lower left corner of this page. Alternatively, you can disable the use of cookies by third-party providers by accessing the opt-out page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/and implement the further information on opt-out. For more information on Google Remarketing and Google's privacy policy, please visit: http://www.google.com/privacy/ads/.
10.8 Web analysis by Webtrends
We use Webtrends Analytics, a web analytics service, on our website. Webtrends Analytics is operated by Webtrends Inc., 555 SW Oak Street, Suite 300, Portland Oregon 97206, USA. Webtrends uses "cookies", text files that are stored on your computer to enable an analysis of your use of the website. The information generated by the cookie (including your IP address) regarding your use of this website is stored exclusively on servers of the ALH Group. No data is transferred to the Webtrends servers. The legal basis for processing personal data using cookies is Article 6, Paragraph 1, Sentence 1, Letter a) GDPR. You can also withdraw your consent at any time with effect for the future by configuring your cookies using the privacy button in the lower left corner of this page.
10.9 Use of Google Analytics
The website uses Google Analytics, a network analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”. These are text files that are installed on your computer and help to analyse the visitor’s use of the website. The data stored by the cookies about your use of the website is transferred to Google and stored on its servers in the United States.
If IP anonymisation is activated on this website, your IP address will be truncated in the member states of the European Union or in other contracting parties in the European Economic Area. Only in exceptional cases is the entire IP address first sent to a Google server in the USA and truncated there. IP anonymisation is active on this website. Google uses this information on behalf of the website provider to evaluate your use of the website by compiling reports on website activity for website operators and providing you with other services relating to website activity and Internet usage. The IP address your browser transmits as part of Google Analytics is not combined with other data held by Google.
Any personal data transferred to servers in the USA will be carried out exclusively on the basis of your consent. If you accept the cookie, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR. Please note that the United States has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a) GDPR.
You can also download and install the Google Analytics opt-out browser add-on for your current web browser to disable tracking by Google Analytics for the future (click here https://tools.google.com/dlpage/gaoptout?hl=en-GB). You can also withdraw your consent at any time with effect for the future by configuring your cookies using the privacy button in the lower left corner of this page.
10.10 Web analysis service Matomo
1. Scope of the processing of personal data
Some of our websites use Matomo (formerly Piwik), an open-source software for statistical analysis of visitor access. Matomo uses cookies, which are stored on your computer and which enable an anonymized analysis of your use of the website. It is not possible to draw conclusions about a specific person, as your IP address is anonymized immediately after processing and before storage.
2 Legal basis for the processing of personal data
The legal basis for the processing of personal data using cookies is Art. 6 section 1 letter f GDPR.
3. Purpose of data processing
Matomo is used for the purpose of improving the quality of our website and its contents. Thereby we learn how the website is used and can optimize our offer constantly.
4. duration of storage, possibility of objection and removal
The cookies used by Matomo are stored on the user's computer and transmitted by the user to our site. Therefore, you as a user have full control over the use of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. On the corresponding web pages, you can disagree to the storage and evaluation of this data by Matomo by clicking the indicated opt-out links. In this case a so-called opt-out cookie will be permanently stored in your browser, which causes Matomo not to collect any data for storage and evaluation. However, if you delete this cookie intentionally or unintentionally, the disagreement against the data storage and evaluation is also removed and can be renewed via the above-mentioned link.
Alternatively, most modern browsers have a so-called "Do Not Track" option, by which they tell websites not to track your user activities. Matomo respects this option.
We use the "Microsoft Advertising" (formerly Bing Ads) conversion tracking tool of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA, in short: "Microsoft"). With this tool, we are able to serve more targeted and effective ads to search engine users and analyse which ads and keywords brought you to our website.
You can find out more about the features of Microsoft Advertising here: https://about.ads.microsoft.com/de-de/loesungen/anzeigenprodukte/abschlussverfolgung
If you decide to accept the corresponding cookie, it will be stored on your computer. Microsoft collects the device source, browser type and the IP address of the user. If you accept the cookie, you also expressly consent to the transfer of your personal data to the USA under certain circumstances in accordance with Art. 49 Paragraph 1, Sentence 1 Letter a) GDPR. We would like to point out that the USA has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, it cannot be ruled out that state (surveillance) authorities may access and further process your personal data even without any legal remedy. The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a) GDPR.
You can object to tracking at any time by rejecting the cookie via our consent tool. You can also object to interest-based advertising by Microsoft Advertising using the settings and opt-out options provided by Microsoft at https://choice.microsoft.com/de-de/opt-out
If you have a Microsoft account, you can use the Microsoft profile settings to define exactly how Microsoft should handle your data, whether cookies should be set and whether you agree to data aggregation for advertising purposes. The settings are platform-independent, i.e., they are applied to all devices, such as desktop computers or mobile devices. https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE
You can find further information on data privacy at https://privacy.microsoft.com/de-de/privacystatement
Information on the person responsible:
Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
10.12 Outbrain Pixel
We use the tracking pixel of Outbrain Inc, 39 W 13th Street New York, NY 10011 USA (hereinafter "Outbrain") on our website. Outbrain embeds a widget on partner sites in which it displays various articles and/or offers that may correspond to the interests of the respective user of the partner site. Links to our websites may also be placed there.
The tracking pixel on our website recognises which ad has been interacted with within the Outbrain widget. Through the pixel, your browser automatically establishes a direct connection with the operator's server. We have no influence on the scope and further use of the data collected by the operator through the use of this tool and inform you according to our state of knowledge.
The processed pixel data concern the following categories of personal data:
- Advertising identifier on mobile devices
- User-defined events on the site
- Outbrain UUID (Unique User ID) in the cookie (if any)
- IP address
- Location data
This data makes it possible to target advertising according to interests by building profiles. The technology is based on a cookie-dependent analysis of previous user behaviour. By using the tracking pixel, personal data, usually the IP address, may be transmitted to Outbrain servers in the USA.
If you accept the corresponding cookie, you also expressly consent to the transfer of your personal data to the USA in accordance with Art. 49 Paragraph 1, Sentence 1 Letter a) GDPR. We would like to point out that the USA has been classified by the European Court of Justice (ECJ) as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights. In particular, it cannot be ruled out that state (surveillance) authorities may access and further process your personal data even without any legal remedy.
The legal basis for processing is Art. 6 Paragraph 1, Sentence 1, Letter a) GDPR and Art. 49 Paragraph 1, Sentence 1, Letter a GDPR.
For more information on data privacy, see: https://www.outbrain.com/privacy/
In addition, you have the option to object to personalised advertising directly with the provider by means of an opt-out: https://my.outbrain.com/recommendations-settings/home
Cooperation with Outbrain
For the use of the Outbrain Pixel and related to the provision of aggregated analytics in relation to the performance of the Client's campaign(s) and/or for enhanced targeting features, personal data is processed under joint responsibility pursuant to Article 26 GDPR with Outbrain UK Limited, 5th Floor, The Place, 175 High Hilborn, London, WC1V 7AA, United Kingdom.
Data processing by the parties
Each party (Outbrain UK Limited u. HALLESCHE Krankenversicherung a.G. and Alte Leipziger Lebensversicherung a.G. respectively) shall comply with all relevant provisions of data privacy laws applicable to the matters covered by the Contract and shall ensure that it processes personal data fairly and lawfully in accordance with applicable data privacy laws in the provision and use of the Service.
To the extent that EU Data Privacy Laws apply to the Service, the Parties shall be deemed to be joint controllers within the meaning of Article 26 of the GDPR solely in relation to the Customer's implementation of Outbrain Pixel and the Parties shall be deemed to be independent controllers for all other processing activities. In particular, the Client remains a strictly independent controller for any Third Party Targeting.
Each party shall remain solely and exclusively responsible for determining the means and purposes of the Processing for its respective Processing Activities.
10.13 Screen on Demand
We use services provided by SoD ScreenOnDemand GmbH, Volkartstraße 76, 80636 Munich, Germany and its partner dataXtrade GmbH, Dachauer Straße 15c, 80335 Munich, Germany (together hereinafter also "SoD"), in particular a so-called tracking pixel on our website. SoD ScreenOnDemand GmbH embeds a widget on partner sites, apps and SmartTVs to target advertising.
Through the pixel, your browser automatically establishes a direct connection with the operator's server. We have no influence on the scope and further use of the data collected by the operator through the use of this tool and inform you according to our state of knowledge.
This data includes:
- Partner website
- Length of stay
- Interactions on the respective website
- Device source
- Browser type
- IP address
The legal basis for the processing is Art. 6 Paragraph 1 Page 1 Letter a) GDPR by accepting the respective cookie. More information can be found at https://screenondemand.de/datenschutz-sod-produkte/#eins
All data stored on Facebook can be requested. Your request will be sent to Facebook. If a request occurs, we will research the user data for our site. You must do the same from your page. We will then send the request to Facebook via the link (https://www.facebook.com/help/contact/308592359910928).
11.1 Social Bookmarks
So-called social bookmarks (e.g., from Facebook, Google, Twitter and Xing) are integrated on our website. Social bookmarks are Internet bookmarks that allow users of such services to collect links and news items. These are only integrated on our website as links to the corresponding services. After clicking on the embedded graphic, you will be redirected to the page of the respective provider, i.e., only then will user information be transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers.
11.2 Social plugins (Facebook, Twitter, Google+)
So-called "Social Plugins" are used on our websites. Currently these are the plugins of the services Facebook, Twitter, Google+. Via these plugins, data, including personal data, can be sent to the US service providers and used by them if necessary.
11.3 Shariff protection tool
The ALH Group itself does not collect any personal data by means of the social plugins or through their use. To prevent data from being transferred to service providers in the USA without the user's knowledge, we use the so-called Shariff solution. This solution ensures that initially no personal data is passed on to the providers of the individual social plug-ins when you visit our websites. Only when you click on one of the social plugins can data be transferred to the service provider and stored there.
If personal data is transferred to the USA on the basis of your consent, please be aware of the following:
The European Court of Justice (ECJ) has declared the EU-US Privacy Shield Agreement to be ineffective, and classifies the USA as an unsafe third country for which there is no adequacy decision, no appropriate guarantees and no effective legal remedies to enforce your rights with respect to your personal data.
The USA does not offer an equivalent level of data privacy compared to the EU. You therefore incur certain risks when transmitting personal data to the USA when using cookies.
In particular, there are no assurances that state (surveillance) authorities will not access and process your personal data, for which you will have no recourse to legal remedies. Most US-based companies are subject to the Foreign Surveillance Act (“FISA”). Section 702 of this law allows US intelligence agencies to access the data of foreign users, which may entail significant disadvantages.
When you provide your consent, you expressly agree to the transfer of your personal data to the USA in accordance with Article 49, Paragraph 1, Sentence 1, Letter a) GDPR and confirm that you are aware of the associated risks.
The above applies in particular to cookies from the following companies or tools:
- Google Tag-Manager
- Google Analytics
- Google Ads (incl. Google Ads Conversion Tracking und Google Ads Remarketing)
- Microsoft Advertising
- Facebook Pixel
- LinkedIn Insight Tag