Protecting your (hereinafter “you” or “user”) personal data (hereinafter “pd”) according to Art. 4(1) General Data Protection Regulation (hereinafter “GDPR) and its safety is important to us. Consequently, we are complying with data protection regulations to offer appropriate protection for pd of all users. In the following, we would like to inform you about the extent and purpose of pd processing on our website.

UNICEPTA GmbH, Salierring 47-53, 50667 Cologne (hereinafter “we“, “UNICEPTA“ or “Operator“) processes pd on the website exclusively within the framework set by the GDPR as well as other applicable data protection regulations.

This privacy policy (hereinafter “pp”) provides information regarding the use of the website www.unicepta.com according to Art. 13 GDPR.

In this pp, we first name the controller for the website as well as the data protection officer in charge. Afterwards, sorted by the type of access as well as the used cookies and social media plugins, information is offered regarding the types of pd used, the purpose and the legal basis for processing as well as possible recipients and possible legitimate interests, deletion periods and, if necessary, further information. To bring the pp to a close, we will explain your rights to you.

1. Contact details of the controller (Art. 13(1a) GDPR)

Responsible for the website’s operations and the handling of pd processing is UNICEPTA GmbH, Salierring 47–53, 50677 Cologne, phone no.: +49 (0) 221 9902-0, E-Mail: info@unicepta.de

2. Contact details of the data protection officer (Art. 13(1b) GDPR)

UNICEPTA’s internal data protection officer is Ms Jana Schulz, phone no. +49 (0) 221-9902-147, E-Mail data_protection(at)unicepta.com.

3. Accessing the website and downloading documents

a. Types of personal data: Each time you access this website or download documents freely accessible on it, log files containing the following data will be collected automatically: browser type and version used, the operating system used, the website from which the system accessed our website (so-called referrers), which sub-websites are being accessed on our website, data and time of the access, internet protocol addresses (IP addresses) of the system accessing the website, its internet service provider as well as other similar data and information that can help with defending against attacks on our IT systems.

b. Purpose of the processing (Art 13(1c) GDPR): The data mentioned before is processed to ensure the functionality of the website and make downloads technologically possible. Furthermore, the data is used to ensure the safety of the IT systems on which the website is running.

c. Legal basis for the processing, legitimate interests (Art 13(1c-d) GDPR): The legal base for the data processing is Art. 6(1f) GDPR, meaning the legitimate interests of UNICEPTA. These legitimate interests consist of operating our online offering, including the ability to offer documents to download.

d. Recipients, third parties, transfer to third countries (Art 13(1e-f) GDPR): No pd is transferred to third parties (Art 4(10) GDPR). All pd is processed on computers located in the European Union. The hosting service provider for the website is our processor. No data is transferred to third countries. Pd is only forwarded to governmental institutions and authorities in compliance with legal requirements.

e. Deletion periods (Art 13(2a) GDPR): Pd is deleted at the latest once you stop visiting our website, that is once you close the browser on your computer. Data on the server (logfiles) is deleted once the provision of data for the purposes of keeping the systems safe is no longer necessary.

4. Request for selected content

Individual content on this website is not available for free download. When clicking on the content, the user will be asked to check a box if they consent to the processing of personal data in accordance with the rules stated below. Having input the required data and having provided consent, the user will then receive the desired product via E-Mail. In addition, the user can consent to being signed up to our newsletter mailing list in order to be kept up to date about future topics and new content.

a. Types of personal data required: title, first and last name, company name (optional), E-Mail address

b. Purpose of the processing (Art. 13 (1)(c) GDPR): The purposes of the data processing are to provide the desired content and to evaluate the interest groups of the desired content; the newsletter serves the further purpose of expanding the business relationship and the reputation and public image of the company

c. Legal grounds for processing, legitimate interests (Art. 13 (1) (c) and (d) GDPR): the legal basis for the processing of the data is Art. 6 (1) (f) GDPR, i.e. it is the legitimate interest of UNICEPTA. These legitimate interests include being able to provide you with our offer and carrying out an evaluation of the interest groups, in order to be able to develop our offer so that it is even more targeted. Information about this will be provided by the newsletter.

d. Recipient/Third party/Transfer to third party (Art 13 (1) (e) and (f) GDPR): Personal data will not be transferred to a third party (Art 4 Nr. 10 GDPR) . All personal data will be processed on computers based within the European Union. The website host is our Processor. There will be no transfer of the data to a third country. Transfer of the personal data to state institutions and authorities will only be carried out within the scope of statutory provisions.

e. Deletion periods (Art 13 (1) (a) GDPR)

Request for selected content: the data that is provided in order to receive the content will be deleted at the latest six months after the completion and evaluation of the study. Registration on newsletter mailing list: deletion occurs as soon as the user unsubscribes.

5. Establishing contact via email via the email addresses listed on the website

In several different locations such as the imprint and in the footer of every site, we are providing you with an email address to contact us by way of email. Please do not use general email addresses to send us documents with personal data such as applications. For establishing contact via email, the following provisions apply:

a. Types of pd: Relevant data are the email address, log files containing the properties of the email and the time of arrival as well as all types of pd added by the sender in the email itself.

b. Purposes of processing (Art. 13 (1c) GDPR): The purpose is to reply to user inquiries as well as, subsequently, the possible initiation, establishment and implementation of a business relationship, depending on the type of inquiry.

c. Legal basis for data processing, possible legitimate interests (Art. 13 (1c-d) GDPR): The legal basis for pd processing is Art 6 (1f) GDPR if the sender of the email is not already a customer or has any other type of existing business relationship with us or is in the process of initiating one. In this case, our legitimate interests lie in informing you and replying to your inquiry as well as possibly entering into a business relationship if that is part of your inquiry. If a contractual relationship already exists or one is to be initiated, the legal basis for processing is Art 6 (1b) GDPR.

d. Recipients, third parties, transfer to third countries (Art. 13 (1e-f) GDPR): No pd is transferred to third parties (Art. 4 (10) GDPR) unless it is explicitly part of the inquiry of the user or if the user expressly agrees to it. All emails are processed on computers within the European Union. The email hosting service provider is our processor. No transfer to third countries happens, nor is it intended. Pd is only forwarded to governmental institutions and authorities in compliance with legal requirements.

e. Deletion periods (Art. 13 (2a) GDPR): Pd is deleted three months after the inquiry is handled, which is also assumed to be the case if the user has not reacted to UNICEPTA’s reply to their inquiry within three months. If an inquiry leads to a contractual relationship or is in preparation of one, a deletion will happen at the latest three months after the contractual or precontractual relationship is finished, in compliance with legal retention obligations. There shall be no deletion if Art 17 (3) GDPR applies, in particular if legal retention obligations exist or if pd is needed to assert, exercise or defend legal rights or to defend against legal claims.

6. Using the contact form

Before using the contact form (sending a filled-out form on the subpage https://www.unicepta.com/en/contact.html), users have to give their explicit consent to the processing of pd related to the usage of the contact form by actively checking the corresponding box. Otherwise, the filled-out form cannot be sent.

Regarding the right to revoke consent at any time, see clause 8.

a. Types of pd: Data includes the obligatory fields name, email address, subject line, the content of the message as well as the technical recording of the given consent.

b. Purpose of the processing (Art. 13 (1c) GDPR): The purpose of the processing is to reply to the user’s inquiry as well as the possible initiation, establishment and implementation of a business relationship, depending on the type of inquiry.

c. Legal basis for the processing (Art. 13 (1c) GDPR): The legal basis is Art 6. (1a) GDPR, meaning the given consent and/or, depending on the ongoing communications, Art. 6 (1b) GDPR for the initiation or implementation of a business relationship.

d. Recipients, third parties, transfer to third countries (Art 13 (1e-f) GDPR): No pd is transferred to third parties (Art 4 (10) GDPR) unless the user explicitly asks for it and their consent also applies to said transfer. All data is processed on computers located in the European Union. The hosting service provider for the website and emails respectively is our processor. No data is transferred to third countries. Pd is only forwarded to governmental institutions and authorities in compliance with legal requirements.

Deletion periods (Art 13 (2a) GDPR): Pd is deleted once three months have passed after the inquiry has been answered or handled unless the nature of the inquiry requires a different process (for instance by providing consultation) or when you revoke your consent ahead of time. If the inquiry leads to a contractual relationship with UNICEPTA or immediately prepares such a relationship, data is deleted according to legal provisions, at the latest three months after the pursued precontractual or contractual relationship has ended. Deletion occurs unless Art. 17 (3) GDPR applies, in particular when legal retention obligations exist or if pd is needed to assert, exercise or defend legal rights or to defend against legal claims.

7. Transmission of application documents

At https://www.unicepta.com/en/career/jobs.html we offer job applicants the possibility to send us a job application, either via a separate portal, for which separate data protection regulation apply [see], or via an e-mail to our HR department jobs(at)unicepta.com. Please do not send applications via general email addresses. For applications send by email, the following provisions shall apply.

a. Types of pd: If the applicant sends an email, the relevant data are the email address including the log files on our computers, as well as all pd related to the application and communicated by the applicant, for example title, surname, first name, details from the CV, certificates and similar documents. 

b. Purposes of processing (Art. 13 (1c) GDPR): The purpose of processing is the selection of applicants and the potential start of an employment relationship.

c. Legal basis for data processing (Art. 13 (1c) GDPR): The legal basis is the desired employment relationship, and actions that may be required for entering into an employment relationship, respectively, in accordance with Art. 6 (1b) GDPR, if the applicant applies for freelance work.

d. Recipients, third parties, transfer to third countries (Art. 13 (1e-f) GDPR): No pd is transferred to third parties (Art. 4 (10) GDPR). All emails are processed on computers within the European Union. The email hosting service provider is our processor. No transfer to third countries happens, nor is it intended. Pd is only forwarded to governmental institutions and authorities in compliance with legal requirements.

e. Deletion periods (Art. 13 (2a) GDPR): Pd is deleted three months after the end of the application process, (i.e. after the decision on the selection or non-selection of a candidate has been communicated), unless (i) the application was successful and the application documents are being added to a personnel file, (ii) you, in your capacity as applicant, explicitly granted your permission to being included in a talent pool for a certain period (after the end of this time period, the data will be deleted), and/or (iii) Art. 17 (3) GDPR applies, in particular if legal retention obligations exist or if pd is needed to assert, exercise or defend legal rights or to defend against legal claims.

8. Customer information

In order to inform our customers about the latest trends and current developments, we use the e-mail dispatch system of kajomi GmbH. kajomi GmbH sends the mails as a technical service provider for UNICEPTA as order processing and receives the necessary data for this order. kajomi GmbH may use the provided data (e-mail addresses) exclusively according to the instructions of UNICEPTA within the European Economic Area. Further information can be found here.

For marketing purposes (creation and use of landing pages incl. contact form), UNICEPTA uses an automation by HubSpot. The service is provided as order processing on the basis of standard contractual clauses; the personal data transmitted may only be used for the purpose of the service provided. You can find more information here.

9. Customer survey

UNICEPTA uses Survey Monkey's survey tool for customer surveys. The service is provided as order processing. The transmitted personal data may only be used for the purpose of the customer survey. The survey results are collected and stored anonymously. Further information can be found here.

10. Visitor management

Visitors of our headquarters in Cologne register via the Proxclick visitor app. A corresponding data protection agreement is available. The provider's privacy policy can be found here. The following provisions apply to the registration:

a. Kind of personal data: surname, first name, company (if applicable), signature

b. Purposes and legal basis for the processing (Art. 13 para. 1 lit. c)  GDPR): The right to preserve the domicilliary right and the guarantee of safety in our company are legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR

c. Receiver/Third parties/transmission to third countries (Art. 13 para. 1 lit. e and f GDPR): Personal data will not be transmitted to third parties (Art. 4. No. 10 GDPR). All personal data is processed on servers located in the European Union. The APP hoster is our contract data processor. A transmission of personal data to government institutions and authorities will only be done in the framework of statutory provisions.

d. Deletion periods (Art. 13 para. 2 lit. a) GDPR): Personal data will be deleted after one year.

11. Use of cookies and social plugins

a. Cookies in general

UNICEPTA uses so-called "cookies". Cookies are small text files, which store settings of websites, e.g. in the user’s web browser, as part of the use of the website. Cookies are used to make the handling of the website easier. UNICEPTA uses session-ID cookies. These cookies are only stored in the user’s web browser during the user’s website session and will be automatically deleted after the user closes the browser. Every user has the option to prevent the installation of such cookies via activating the corresponding browser setting. In this case, however, the user might not be able to make full use of all functions on the website.

Depending on the browser you use, you have different options to prevent the storage of cookies on your computer, suppress existing cookies, display them and delete them. If you have trouble doing this, we recommend you go to the manufacturer’s website where you can get the required information. If you decide that you do not want cookies to be stored on your computer, you will still be able to access our website.

b. General remarks on social media plug-ins 

As an additional service, our website offers you social buttons, which enable the interaction with social media services. In order to prevent an unwanted transfer of your user data (for example the address of the website you are currently visiting), you only reach these services when you click on the link. On the individual service site, the social networks may then potentially collect and analyse the data. We cannot influence how and if the data is being collected and influenced. 

We therefore inform you based on our knowledge: 

Only when you click on the link your browser may potentially establish a direct connection to  the servers of the above-mentioned services. This way, the information that you have visited our website is being indirectly (referrer) transmitted to these services. If you are logged into your personal account with the service when your visit our website, you can usually “share” the document or leave a comment, etc. after you have clicked on the social button. If you do not want such a data transfer, we strongly recommend that you not click on the social buttons. 

For information on the purposes and extent of the data collection carried out by the social media services and the further processing and use of your data by these services as well as your rights regarding the data and setting options to protect your privacy, please refer to the data protection notices of the social media services.

c. Remarks on Facebook

Facebook is partly used as a link, partly as a plug-in. 

The website includes a social plug-in of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook“). The plug-in is solely operated by Facebook and can be recognized by one of the Facebook logos. A list is available here:  https://developers.facebook.com/docs/plugins/#page-plugin.

When you visit the website with a Facebook plug-in, your browser will make a direct connection with Facebook’s servers. According to information from Facebook, at least the information that you have visited the website, including your IP address, date, time, the browser and the operating system used are transferred to Facebook, where the data will be deleted after 90 days. If you are logged into your personal Facebook user account when you visit the website, Facebook can match your visit with your user account. If you click on a Facebook plug-in or use other Facebook functions (e.g. writing a comment), this information will also be transmitted to Facebook and stored by Facebook. If you want to prevent this, you have to log out of your personal Facebook user account before you visit the website. Moreover, you can block the Facebook plug-ins with add-ons for your browser. 

The operator does not receive any information on the data collected by the Facebook plug-ins and transferred to Facebook. For information on the purpose and extent of use of the pd collected by Facebook as well as on your rights and options to protect your privacy, please refer to Facebook’s data protection notice, which is available here: https://www.facebook.com/policy.php.

d. Remarks on Twitter

Functions of the Twitter service are integrated into the website. These functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the “re-tweet“ function, the websites visited by the user are connected to their Twitter account and made known to other users. In this context, data is transferred to Twitter, as well.  We, the website operator, would like to inform you that we neither have any knowledge about the content of the transmitted data nor do we know how the data is used by Twitter. For further information, please refer to Twitter’s privacy statement:  https://twitter.com/en/privacy.

e. Remarks on YouTube

Our website uses plug-ins of Google’s YouTube platform. The operator of YouTube is: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our websites that is equipped with a YouTube plug-in, a connection to the YouTube servers will be established. Via this connection, they YouTub server is informed about which of our sites you have visited.

If you are logged into your YouTube account, you enable YouTube to directly match your surfing behavior with your personal profile. You can prevent this if you log out of your YouTube account. 

For further information on the use of user data, please take a look at YouTube’s privacy statement: https://policies.google.com/privacy/update?hl=de.

12. Rights of the user (Art 13 (2 b – e), Art  7 (3) GDPR)

Provided the legal requirements are met, you have the right at any given time to:

§  receive information on personal data processed by our company, in particular on its purpose, categories of recipients with current or future access to your personal data, planned storage period and on the existence of the rights explained in this paragraph in accordance with Art. 15 of the GDPR.

§  demand the immediate correction of false personal data or its completion in case of missing information as per Art.  16 of the GDPR.

§  request the deletion of your personal data as per Art. 17 of the GDPR if processing said data is not required to ensure the freedom of opinion and information, fulfil legal obligations, due to reasons of public interest or for enforcing, exercising or solely defending rights in legal claims.

§  in accordance with Art. 18, place restrictions on the amount of personal data to be processed if either its veracity is in question or its processing is unlawful, but you reject a deletion and we no longer need the data, though you may need the data in future to enforce, exercise and defend legal claims or you object to its processing as per section 21.

§  To receive the personal data you provided to us in a standardized, structured and machine-readable format or demand a transfer to a third party as per Art.  20.

§  revoke previous consent to processing your personal data in accordance with Art. 7 (3), which will result in our company no longer being allowed to process the data and

§  complain at a regulatory authority as per Art. 77 of the GDPR. In general, authorities in your place of residence or workplace or in the country in which UNICEPTA maintains its headquarters are available.

Provided personal data is processed based on legitimate interest as per Art. 6 (1 lit. 1 f) of the GDPR, the affected individual has the right to object against the processing of his/her personal data if there are reasons that stem from a particular situation or if the individual objects to direct advertising. In case of the latter, the individual has a general right to object, which our company implements without needing detailed information on a particular situation.

To exercise these rights and if you have any questions about data protection, please contact our data protection team at team-dataprotection(at)unicepta.com.