(1) In the following, we inform you about the collection and processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is handz.on GmbH, St.-Martin-Straße 64, 81541 Munich, Germany, info@on.de (see our imprint). Hereinafter referred to as „handz.on“ or „we“.
(3) You can contact our data protection officer as follows:
handz.on GmbH
St.-Martin-Strasse 64
81541 Munich
(4) When you contact us by telephone, e-mail or via a website form on our website, the data you provide will be stored by us in order to answer your questions. The data transmitted in this way will be processed to process the contact request by the controller on the basis of Art. 6 para. 1 lit. b GDPR for contracts and pre-contractual measures such as offers and Art. 6 para. 1 lit. f GDPR for other inquiries. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. Your data may be stored in our CRM system.
(5) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes and, if necessary, obtain your consent. We will also state the specified criteria for the storage period.
(1) You have the following rights vis-à-vis us with regard to your personal data:
(2) If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we kindly ask you to contact our data protection officer.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Personal data that you transmit to us in the course of exercising data subject rights will be stored by us in accordance with Art. 6 para. 1 lit. f GDPR in the legitimate interest and deleted after three years. The legitimate interest lies in the verifiability of the proper processing of your request.
(1) When using the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure the stability of the connection and security of your data (legal basis is Art. 6 para. 1 lit. f GDPR). The data collected is stored and automatically deleted after 2 months at the latest.
(2) In addition to the aforementioned data, we process cookie data on the basis of consent. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
(3) Use of cookies
a) This website uses the following types of cookies, the scope and function of which are explained below:
b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
d) When you visit our website for the first time, we display a cookie banner. In the cookie banner, you can accept all cookies, only allow essential cookies or only allow cookies from the categories used. By clicking on the „Individual data protection settings“ button, you can also make a selective choice of individual cookies within the individual categories. If you do not accept cookies in the „Statistics“ category, your usage behavior on our website cannot be evaluated. This does not result in any functional restrictions for you when using our website. If you have given your consent, the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. The cookie consent management process we use manages the cookies on our website as well as the consent and revocation by you as a website visitor.
| Cookie name | Cookie validity | Cookie description |
| borlabs-cookie | 182 days | Saves your cookie settings. Therefore it must always be set. |
| _pk_id.2.806c | 380 days | Used to distinguish website visitors. |
| _pk_ses.2.806c | 40 minutes | Defines the time for the end of your session in the event of inactivity. |
| wp-wpml_current_language | Until the end of the session | Saves the language setting („de“ for German or „en“ for English) for the duration of your session. This cookie is always set, regardless of your cookie settings in consent management. |
f) If you do not wish to accept any cookies at all, you can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies or refuse all cookies in our cookie banner.
Your data will be processed within the EU and the EEA. To the extent permitted by law, data processing also takes place outside Europe.
Other functions and offers on our website.
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. These are, for example, registration to download certain content, registration to participate in webinars and other events or the presentation of vacancies in the team on handz.on. To register for events, you generally have to provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(1) This website uses Matomo, an open source web analysis service. Matomo uses so-called „cookies“, text files that are stored on your computer and enable your use of the website to be analyzed. The cookie is initially deactivated and is only set if you expressly agree to the use of Matomo in Cookie Consent Management. The information generated by the cookie about your use of this website is then transmitted to one of our servers and stored there.
(2) The IP address transmitted by your browser is shortened and not merged with other data.
(3) You can prevent the storage of cookies by setting your browser software accordingly; this does not result in a functional restriction of our website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your shortened IP address) and the processing of this data by us by rejecting the setting of the Matomo cookie in Cookie Consent Management.
(4) We use Matomo to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 lit. a GDPR.
(5) Information from the third-party provider: https://matomo.org/about/.
Overview of data protection: https://matomo.org/gdpr-analytics/
Data protection information: https://matomo.org/privacy-policy/
We integrate the videos of the platform „YouTube“ of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These videos are stored on www.youtube.com and can be played directly from our website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 1 543 1000, is responsible for the data processing of persons living outside the United States.
We would like to point out that you use the Google service offered here and its functions on your own responsibility. YouTube uses cookies for data collection and statistical data analysis. The videos on our website are embedded in our website in extended data protection mode. This means that data is only forwarded to YouTube or Google when you play the embedded video. This means that YouTube does not store cookies for a user who views one of our websites with an embedded YouTube video player but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user’s computer. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by YouTube. The information generated by the cookie about your use of this website is transmitted to the YouTube servers and stored. Your IP address cannot be assigned unless you are logged in to YouTube or another Google service before playing the videos. If you do not wish this, you must log out of your YouTube and Google account.
Privacy policy: https://www.google.com/policies/privacy/.
We use the cookie consent management of the company Borlabs (Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany). The cookie plugin enables the GDPR-compliant setting of cookies according to the opt-in procedure (user must actively consent). For this purpose, cookies can be managed in groups and the user can decide which cookies they consent to. The cookie consent declaration can be configured for multiple languages. Consent data includes the following data: Date and time of the visit or consent / refusal. The data is processed for the purpose of compliance with legal obligations (obligation to provide evidence pursuant to Art. 7 para. 1 GDPR) and the associated documentation of consent and thus on the basis of Art. 6 para. 1 lit. c GDPR. Local storage is used to store the data. The consent data is stored for three years. The data is stored in the European Union.
Further information on the data collected and contact options can be found at https://usercentrics.com/privacy-policy/
We use the provider JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, feedback@join.com, to provide you with job offers on our website. The data transmitted to JOIN when you access the website and the job offers serve the purpose of implementing pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, all data transmitted by the applicant will be processed by JOIN and forwarded to handz.on for processing the application.
Further notes and information on data protection at JOIN Solutions GmbH can be found here: https://join.com/de/privacy-policy
We use Microsoft Teams (Microsoft Ireland Operations Ltd, 70 SIR JOHN ROGERSON’S QUAY, DUBLIN 2, 662881 Inc, https://teams.microsoft.com) to conduct video and audio conferences. The purpose is the implementation of projects (fulfillment of existing contracts), initiation of business relationships and internal company communication.
Communication participants are regularly the employees of our customers and interested parties, our partners, service providers and suppliers and our company.
Within the scope of use, data of the communication participants are processed and stored on Microsoft’s servers, insofar as these are part of communication processes with us. This data may include, in particular, inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. visual and vocal contributions as well as entries in chats, shared screen content and entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), registration and contact data.
Microsoft may process usage data and metadata for security purposes, service optimization or marketing purposes. We therefore ask you to observe Microsoft’s data protection information.
Notes on legal bases: If we ask users for their consent to the use of Microsoft Teams or certain functions (e.g. consent to the recording of conversations), the legal basis for processing is consent in accordance with Art. 6 para. 1 lit. a GDPR. Furthermore, their use may be part of our (pre-)contractual services in accordance with Art. 6 para. 1 lit. b GDPR, provided that the use has been agreed within this framework. Otherwise, user data is processed on the basis of Art. 6 para. 1 lit. f GDPR for our legitimate interests in efficient and secure communication with our communication partners.
Notes on the storage period: We delete personal data when there is no longer a need for further storage to achieve the above-mentioned purposes. Personal data may be stored for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years). In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.
Your rights: You are entitled to the rights set out above.
You can book via Microsoft Bookings (Microsoft Ireland Operations Ltd, 70 SIR JOHN ROGERSON’S QUAY, DUBLIN 2, 662881 Inc, https://teams.microsoft.com) to arrange appointments directly with selected employees of our company. The purpose is to simplify the arrangement of appointments. You will be shown free time slots of our colleagues so that you can make appointment requests with minimal coordination effort.
Communication participants are regularly the employees of our customers and interested parties, our partners, service providers and suppliers and our company.
Use without using your personal data is not possible. The use of this service is voluntary. In particular, it is still possible to make an appointment (e.g. by telephone or in person).
Within the scope of use, data of the communication participants are processed and stored on Microsoft’s servers, insofar as these are part of communication processes with us. This data may include, in particular, inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. visual and vocal contributions as well as entries in chats, shared screen content and entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), registration and contact data.
Microsoft may process usage data and metadata for security purposes, service optimization or marketing purposes. We therefore ask you to observe Microsoft’s data protection information.
Notes on legal bases: If you make use of this offer, the legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. Furthermore, the use may be part of our (pre-)contractual services in accordance with Art. 6 para. 1 lit. b GDPR, provided that the use of third-party providers has been agreed in this context. Otherwise, user data is processed on the basis of Art. 6 para. 1 lit. f GDPR for our legitimate interests in efficient and secure communication with our communication partners.
Notes on the storage period: We delete personal data when there is no longer a need for further storage to achieve the above-mentioned purposes. Personal data may be stored for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years). In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.
Your rights: You are entitled to the rights set out above.
We use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, https://www.brevo.com) to send emails to contacts who have consented to being contacted for direct marketing purposes.
The persons concerned are employees of our interested parties, customers, partners and our company.
Use without processing personal data is not possible.
In the context of use, personal data of the communication participants are processed and stored on Brevo’s servers, insofar as these are part of the communication processes with us. This data may include, in particular, inventory data (e.g. name), contact data (in particular the e-mail address), content data(content of the e-mails sent) as well as meta and communication data (e.g. time of sending, opening and click rates, IP address, device information).
Brevo processes this data on our behalf for the purpose of sending, analyzing and optimizing email campaigns. Brevo may also process metadata and usage data for security and service optimization purposes. We therefore ask you to also observe Brevo’s data protection information:
https://www.brevo.com/de/legal/privacypolicy/
Information on the legal basis:
The processing of personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Information on the storage period:
We delete personal data as soon as it is no longer required to achieve the above-mentioned purposes. In addition, personal data may be stored for the duration of statutory retention or limitation periods (usually three to thirty years). In these cases, the data will be deleted after the respective periods have expired.
Your rights:
You are entitled to the rights set out above as a data subject.
Privacy policy of handz.on GmbH for the use of the ChatBot
The controller within the meaning of the General Data Protection Regulation (GDPR) is handz.on GmbH
St.-Martin-Straße 64
81541 Munich
Managing Director: Markus Obser
Phone: +49 89 7 167 767 0
info@on.de
The data protection officer of handz.on GmbH is Alexander Grundner-Culemann
c/o handz.on GmbH
St.-Martin-Straße 64
81541 Munich
Phone: +49 89 7 167 767 0
datenschutz@on.de
(1) Legal basis
Whoever connects to the ChatBot of handz.on via the link, writes something in its input field or says something to it (user), thereby recognizes the Terms of Use for the ChatBot and thereby also consents to the storage of personal data relating to him/her. According to Art. 6 para. 1 sentence 1 letter a EU General Data Protection Regulation (GDPR) the storage of such data is permitted.
If contractual agreements are prepared or fulfilled through the chat, the storage of such data is permitted in accordance with Art. 6 para. 1 sentence 1 letter b GDPR.
If handz.on GmbH (handz.on) has to fulfill legal obligations and therefore has to store personal data arising from the chat, it may do so in accordance with Art. 6 para. 1 sentence 1 letter c GDPR. sentence 1 letter c of the GDPR.
If handz.on has a legitimate interest or someone else, and if this outweighs the fundamental rights and freedoms of the user, handz.on may store and process the necessary data, Art. 6 para.1 sentence 1 letter f GDPR.
(2) Duration of storage
Personal data relating to users will be deleted if their storage is no longer required; or their processing will be restricted accordingly, Art. 17 and 18 GDPR.
(3) Rights of users
Users have the right to withdraw their consent at any time, Art. 7 (3) GDPR. GDPR.
You have the right, for example, to request information about the data stored about you in accordance with Art. 15 GDPR, and to have it corrected or deleted, Art. 16 and Art. 17 GDPR.
You can have the processing restricted, Art. 18 GDPR.
Under Art. 20 GDPR, you have the right to obtain the data concerning you.
You can also object to the processing under Art. 21 GDPR or lodge a complaint with a data protection supervisory authority, Art. 77 GDPR.
(4) Terms of use
handz.on assumes that users are familiar with and comply with the terms of use.
(5) Type of data collected
By using the ChatBot, handz.on accepts the user’s consent to the storage and processing of the following data:
A SessionID is used to technically assign the ongoing chat conversation and to maintain the chat during the conversation.
The SessionID does not allow direct identification of a person and is only used for the duration of the respective session.
The user’s chat entries, the chatbot’s responses, the session ID, a (pseudonymized) user ID assigned to the user, a message ID, category identifiers such as ‚Tech‘ or ‚User‘, log identifiers ‚Error‘ or ‚Info‘, tech event statuses such as ‚Stream-Ended‘ or ‚Stream-Started‘, tech event descriptions and tech data such as ‚Text length of message‘ or ‚Number of words‘ are automatically pseudonymized or masked.
(6) Artificial intelligence and Large Language Model (LLM)
The ChatBot is controlled by so-called artificial intelligence in such a way that computers can recognize characters or language and calculate the probable desired response. So-called Large Language Models (LLMs) are used for this purpose. To prevent the user’s person from being identified, data is anonymized or pseudonymized as far as technically possible and reasonable with regard to the purpose of the chat.
Personal content of finished chats is not saved and can therefore never be used for later chats. The ChatBot sometimes ‚acts‘ as if this were the case („Nice to see you here again.“).
(7) AI services in third countries and outside the EU
handz.on also uses external AI service providers, including foreign ones. Data from the chat is only transmitted in anonymized or pseudonymized form.
If such AI service providers are not based in a country of the European Union, there are standard protection clauses in accordance with Art. 44 ff GDPR, in particular Art. 46 II letter d GDPR.
(8) Deletion of the chat history
The content of the user’s entries and the chatbot’s reaction to them are only stored temporarily and deleted after the end of the chat as soon as the time limit is met and the data is no longer required.
The chat history is analyzed for certain factors, e.g. duration, scope, vocabulary, pauses, etc.. Such analyses are carried out in such an anonymized manner that under no circumstances can the identity of the user be deduced. The results of the analyses are deleted within one year.
We are delighted that you are interested in us as an employer. Below you will find information on how personal data is processed in connection with your application. The data protection information for applicants applies in addition to the information on the website already mentioned.other functions and offers on our website.
Which of your data is processed by handz.on and for what purposes?
We use the provider JOIN Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, feedback@join.com to provide you with job offers on our website.
The data transmitted to JOIN when accessing the website and the job offers serve the purpose of implementing pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, all data transmitted by the applicant will be processed by JOIN and forwarded to handz.on for processing the application.
Further notes and information on data protection at JOIN Solutions GmbH can be found here: https://join.com/de/privacy-policy
What is the legal basis for the processing?
The legal basis for the processing of your personal data in the application process is primarily Section 26 (1) sentence 1 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests. Our interest then lies in the assertion of or defense against claims.
How long will the application data be stored?
Applicants‘ data will be deleted after six months in the event of a rejection.
If you have consented to your personal data being stored further, your data will be transferred to our applicant pool. There, the data will be deleted after two years without further notification if no suitable position for the applicant could be found in our company during this period.
If you are accepted for a position in our company during the application process, your data will be transferred from the applicant pool to our personnel information system.
To which recipients is the data forwarded?
Your application data will be reviewed by the management upon receipt of your application. Suitable applications are forwarded internally to the department managers responsible for the respective open position. At handz.on, only those persons have access to your data who need it for the proper course of our application process. If you have applied to us via our partner JOIN, please refer to the „JOIN“ section above in the data protection information.
handz.on GmbH reserves the right to amend this data protection notice at any time in compliance with the applicable data protection regulations and other statutory provisions.
Status: 09.03.2023
📞 Jetzt mit unserem Tony sprechen unter folgender Nummer:
