(1) In the following, we inform you about the collection and processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is handz.on GmbH, St.-Martin-Straße 64, 81541 Munich, Germany, info@on.de (see our imprint). Hereinafter referred to as “handz.on” or “we”.
(3) You can contact our data protection officer as follows:
handz.on GmbH
St.-Martin-Strasse 64
81541 Munich
(4) When you contact us by telephone, e-mail or via a website form on our website, the data you provide will be stored by us in order to answer your questions. The data transmitted in this way will be processed to process the contact request by the controller on the basis of Art. 6 para. 1 lit. b GDPR for contracts and pre-contractual measures such as offers and Art. 6 para. 1 lit. f GDPR for other inquiries. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. Your data may be stored in our CRM system.
(5) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes and, if necessary, obtain your consent. We will also state the specified criteria for the storage period.
(1) You have the following rights vis-à-vis us with regard to your personal data:
(2) If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we kindly ask you to contact our data protection officer.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Personal data that you transmit to us in the course of exercising data subject rights will be stored by us in accordance with Art. 6 para. 1 lit. f GDPR in the legitimate interest and deleted after three years. The legitimate interest lies in the verifiability of the proper processing of your request.
(1) When using the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure the stability of the connection and security of your data (legal basis is Art. 6 para. 1 lit. f GDPR). The data collected is stored and automatically deleted after 2 months at the latest.
(2) In addition to the aforementioned data, we process cookie data on the basis of consent. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
(3) Use of cookies
a) This website uses the following types of cookies, the scope and function of which are explained below:
b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
d) When you visit our website for the first time, we display a cookie banner. In the cookie banner, you can accept all cookies, only allow essential cookies or only allow cookies from the categories used. By clicking on the “Individual data protection settings” button, you can also make a selective choice of individual cookies within the individual categories. If you do not accept cookies in the “Statistics” category, your usage behavior on our website cannot be evaluated. This does not result in any functional restrictions for you when using our website. If you have given your consent, the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. The cookie consent management procedure we use manages the cookies on our website as well as the consent and revocation by you as a website visitor.
| Cookie name | Cookie validity | Cookie description |
| borlabs-cookie | 182 days | Saves your cookie settings. Therefore it must always be set. |
| _pk_id.2.806c | 380 days | Used to distinguish website visitors. |
| _pk_ses.2.806c | 40 minutes | Defines the time for the end of your session in the event of inactivity. |
| wp-wpml_current_language | Until the end of the session | Saves the language setting (“de” for German or “en” for English) for the duration of your session. This cookie is always set, regardless of your cookie settings in consent management. |
f) If you do not wish to accept any cookies at all, you can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies or refuse all cookies in our cookie banner.
Your data will be processed within the EU and the EEA. To the extent permitted by law, data processing also takes place outside Europe.
Other functions and offers on our website.
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. These are, for example, registration to download certain content, registration to participate in webinars and other events or the presentation of vacancies in the team on handz.on. To register for events, you generally have to provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(1) This website uses Matomo, an open source web analysis service. Matomo uses so-called “cookies”, text files that are stored on your computer and enable your use of the website to be analyzed. The cookie is initially deactivated and is only set if you expressly agree to the use of Matomo in Cookie Consent Management. The information generated by the cookie about your use of this website is then transmitted to one of our servers and stored there.
(2) The IP address transmitted by your browser is shortened and not merged with other data.
(3) You can prevent the storage of cookies by setting your browser software accordingly; this does not result in a functional restriction of our website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your shortened IP address) and the processing of this data by us by rejecting the setting of the Matomo cookie in Cookie Consent Management.
(4) We use Matomo to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 lit. a GDPR.
(5) Information from the third-party provider: https://matomo.org/about/.
Overview of data protection: https://matomo.org/gdpr-analytics/
Data protection information: https://matomo.org/privacy-policy/
We integrate the videos of the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These videos are stored on www.youtube.com and can be played directly from our website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 1 543 1000, is responsible for the data processing of persons living outside the United States.
We would like to point out that you use the Google service offered here and its functions on your own responsibility. YouTube uses cookies for data collection and statistical data analysis. The videos on our website are embedded in our website in extended data protection mode. This means that data is only forwarded to YouTube or Google when you play the embedded video. This means that YouTube does not store cookies for a user who views one of our websites with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user’s computer. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by YouTube. The information generated by the cookie about your use of this website is transmitted to the YouTube servers and stored. Your IP address cannot be assigned unless you are logged in to YouTube or another Google service before playing the videos. If you do not wish this, you must log out of your YouTube and Google account.
Privacy policy: https://www.google.com/policies/privacy/.
We use the cookie consent management of the company Borlabs (Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany). The cookie plugin enables the GDPR-compliant setting of cookies according to the opt-in procedure (user must actively consent). For this purpose, cookies can be managed in groups and the user can decide which cookies they consent to. The cookie consent declaration can be configured for multiple languages. Consent data includes the following data: Date and time of the visit or consent / refusal. The data is processed for the purpose of compliance with legal obligations (obligation to provide evidence pursuant to Art. 7 para. 1 GDPR) and the associated documentation of consent and thus on the basis of Art. 6 para. 1 lit. c GDPR. Local storage is used to store the data. The consent data is stored for three years. The data is stored in the European Union.
Further information on the data collected and contact options can be found at https://usercentrics.com/privacy-policy/
We use the provider JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, feedback@join.com, to provide you with job offers on our website. The data transmitted to JOIN when you access the website and the job offers serve the purpose of implementing pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, all data transmitted by the applicant will be processed by JOIN and forwarded to handz.on for processing the application.
Further notes and information on data protection at JOIN Solutions GmbH can be found here: https://join.com/de/privacy-policy
We use Microsoft Teams (Microsoft Ireland Operations Ltd, 70 SIR JOHN ROGERSON’S QUAY, DUBLIN 2, 662881 Inc, https://teams.microsoft.com) to conduct video and audio conferences. The purpose is the implementation of projects (fulfillment of existing contracts), initiation of business relationships and internal company communication.
Communication participants are regularly the employees of our customers and interested parties, our partners, service providers and suppliers and our company.
Within the scope of use, data of the communication participants are processed and stored on Microsoft’s servers, insofar as these are part of communication processes with us. This data may include, in particular, inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. visual and vocal contributions as well as entries in chats, shared screen content and entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), registration and contact data.
Microsoft may process usage data and metadata for security purposes, service optimization or marketing purposes. We therefore ask you to observe Microsoft’s data protection information.
Notes on legal bases: If we ask users for their consent to the use of Microsoft Teams or certain functions (e.g. consent to the recording of conversations), the legal basis for processing is consent in accordance with Art. 6 para. 1 lit. a GDPR. Furthermore, their use may be part of our (pre-)contractual services in accordance with Art. 6 para. 1 lit. b GDPR, provided that the use has been agreed within this framework. Otherwise, user data is processed on the basis of Art. 6 para. 1 lit. f GDPR for our legitimate interests in efficient and secure communication with our communication partners.
Notes on the storage period: We delete personal data when there is no longer a need for further storage to achieve the above-mentioned purposes. Personal data may be stored for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years). In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.
Your rights: You are entitled to the rights set out above.
You can book via Microsoft Bookings (Microsoft Ireland Operations Ltd, 70 SIR JOHN ROGERSON’S QUAY, DUBLIN 2, 662881 Inc, https://teams.microsoft.com) to arrange appointments directly with selected employees of our company. The purpose is to simplify the arrangement of appointments. You will be shown free time slots of our colleagues so that you can make appointment requests with minimal coordination effort.
Communication participants are regularly the employees of our customers and interested parties, our partners, service providers and suppliers and our company.
Use without using your personal data is not possible. The use of this service is voluntary. In particular, it is still possible to make an appointment (e.g. by telephone or in person).
Within the scope of use, data of the communication participants are processed and stored on Microsoft’s servers, insofar as these are part of communication processes with us. This data may include, in particular, inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. visual and vocal contributions as well as entries in chats, shared screen content and entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), registration and contact data.
Microsoft may process usage data and metadata for security purposes, service optimization or marketing purposes. We therefore ask you to observe Microsoft’s data protection information.
Notes on legal bases: If you make use of this offer, the legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. Furthermore, the use may be part of our (pre-)contractual services in accordance with Art. 6 para. 1 lit. b GDPR, provided that the use of third-party providers has been agreed in this context. Otherwise, user data is processed on the basis of Art. 6 para. 1 lit. f GDPR for our legitimate interests in efficient and secure communication with our communication partners.
Notes on the storage period: We delete personal data when there is no longer a need for further storage to achieve the above-mentioned purposes. Personal data may be stored for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years). In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.
Your rights: You are entitled to the rights set out above.
We use Yesware (Yesware, Inc. 75 Kneeland Street, Boston, Massachusetts 02111 USA) to send e-mails to contacts who have consented to being contacted for direct marketing purposes, https://www.yesware.com).
The persons concerned are employees of our interested parties, customers, partners and our company.
Use without using your personal data is not possible.
As part of the use, data of the communication participants are processed and stored on the servers of Yesware, insofar as these are part of communication processes with us. This data may include, in particular, inventory data (e.g. names), contact data (in particular the e-mail address), content data (the content of our e-mail to you) and meta/communication data (e.g. device information, IP addresses).
Yesware may process usage data and metadata for security purposes, service optimization or marketing purposes. We therefore ask you to observe Yesware’s data protection information. https://www.yesware.com/security
Notes on legal bases: The legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Notes on the storage period: We delete personal data when there is no longer a need for further storage to achieve the above-mentioned purposes. Personal data may be stored for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years). In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.
Your rights: You are entitled to the rights set out above.
We are delighted that you are interested in us as an employer. Below you will find information on how personal data is processed in connection with your application. The data protection information for applicants applies in addition to the information on the website already mentioned.other functions and offers on our website.
Which of your data is processed by handz.on and for what purposes?
We use the provider JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, feedback@join.com to provide you with job offers on our website.
The data transmitted to JOIN when accessing the website and the job offers serve the purpose of implementing pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, all data transmitted by the applicant will be processed by JOIN and forwarded to handz.on for processing the application.
Further notes and information on data protection at JOIN Solutions GmbH can be found here: https://join.com/de/privacy-policy
What is the legal basis for the processing?
The legal basis for the processing of your personal data in the application process is primarily Section 26 (1) sentence 1 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests. Our interest then lies in the assertion of or defense against claims.
How long will the application data be stored?
Applicants’ data will be deleted after six months in the event of a rejection.
If you have consented to your personal data being stored further, your data will be transferred to our applicant pool. There, the data will be deleted after two years without further notification if no suitable position for the applicant could be found in our company during this period.
If you are accepted for a position in our company during the application process, your data will be transferred from the applicant pool to our personnel information system.
To which recipients is the data forwarded?
Your application data will be reviewed by the management upon receipt of your application. Suitable applications are forwarded internally to the department managers responsible for the respective open position. At handz.on, only those persons have access to your data who need it for the proper course of our application process. If you have applied to us via our partner JOIN, please refer to the “JOIN” section above in the data protection information.
handz.on GmbH reserves the right to amend this data protection notice at any time in compliance with the applicable data protection regulations and other statutory provisions.
Status: 09.03.2023
Our cooperations
