As of November 2024
· www.win-ci.com (hereinafter referred to as "websites")
· Contacting, especially inquiries regarding offers; communication history
· Job application portal and application process
For websites of other providers, to which reference is made, for example, via links, the respective data protection notices and declarations indicated there apply.
If this privacy policy contains external links to third-party providers, the last access was recorded on November 26, 2024.
Unless otherwise stated, the:
WINDESIGN GmbH (hereinafter referred to as ‘WINDESIGN’, ‘we’)
Franzstraße 2
52064 Aachen
Phone: +49 (0)241 9291 2345
E-Mail: info@win-ci.com
is responsible for the processing of personal data within the scope of this privacy policy.
E-Mail: datenschutz@hagen-consulting.de
When you access and use these websites, we process an IP address, the user agent, timestamp, request method, requested files, data volume, and status code, and store these accesses for control purposes in the web server log files. The legal basis is Article 6(1)(f) GDPR. The log files are automatically deleted as soon as further storage is no longer necessary.
Recipients of your data are Prismic, 9 rue de la Pierre Levée, 75011 Paris, France, as well as Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The data stored with AWS is kept on servers within the EU. When using AWS servers, your data may be transferred to the USA since AWS has its headquarters there. For this reason, AWS adheres to the Data Privacy Framework. This is an adequacy decision that ensures certified companies provide an appropriate level of data protection for data transfers to the USA.
These websites use cookies. A cookie is a small text file stored on your device to collect and save information about your use of these websites. Cookies can, for example, store information about preferred settings.
The cookie named 'cc_cookie' is created as soon as you make a selection in the CCM. The cookie named 'i18n_redirected' is required to import the language modules from the Prismic backend. Additional cookies are technically necessary to maintain the respective user session and ensure load balancing.
The legal basis for processing your data through technically required cookies is Article 6(1)(f) GDPR. The legal basis for processing your data through technically non-essential cookies is your consent pursuant to Article 6(1)(a) GDPR.
If you consent pursuant to Article 6(1)(a) GDPR, we process your data for web statistics on these websites using the tracking tool ‘Google Analytics’ by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This requires – provided your web browser is not set to block tracking services by default – the storage of Analytics cookies on your device. These cookies collect various data during your use of these websites, including information about your origin, screen resolution, frequency and timing of your visits, as well as details about your device and browser, click paths, the pages visited, and the duration of time spent before switching or leaving the page. In the context of 'tracking cookies' and web analytics, the bounce rate is often referred to, which measures the percentage of visitors who enter a webpage and leave without performing any further actions.
We also use Google Tag Manager on these websites. This tool facilitates the efficient management and triggering of various tags, such as third-party scripts, through a user-friendly web interface. While Google Tag Manager itself does not collect personal data, the integration and execution of the script send requests to the servers of Google LLC, potentially giving Google access to certain technical data such as IP addresses and metadata. This data may be used by Google to enable the delivery and management of the tags. All integrated tags, such as those from Google Analytics, are centrally managed via the Tag Manager and can be adjusted, activated, or deactivated without requiring changes to the website code. For more information, please visit Google's official page at: developers.google.com/tag-platform/tag-manager
Your consent to the processing of your data through Google Analytics or the Tag Manager is voluntary and not required for the use of these websites. You can withdraw your consent at any time with effect for the future.
When using Google Analytics or Google Tag Manager, your data may be transferred to the USA, as Google LLC is headquartered there. For this reason, Google LLC adheres to the Data Privacy Framework. This is an adequacy decision that ensures certified companies provide an appropriate level of data protection for data transfers to the USA.
If you contact WINDESIGN directly (e.g., via email, phone, web form), we will process your information to the extent necessary to respond to your contact inquiry and any requested actions. The legal basis is Article 6(1)(b) GDPR.
If your inquiry pertains to the application process or your application (questions related to ‘Working at WINDESIGN’), the legal basis for processing your data is Article 6(1)(b) GDPR in conjunction with Article 88 GDPR and § 26 BDSG.
If your contact inquiry is neither necessary for the fulfillment of a contract with WINDESIGN nor for the execution of pre-contractual measures, the legal basis for processing your data is Article 6(1)(f) GDPR. The legitimate interest lies in processing the received message conclusively.
Your message will be stored until the processing is completed. Longer storage will only occur if we are entitled or obligated to do so on a case-by-case basis.
Should you contact WINDESIGN via external sites such as www.instagram.com and/or www.linkedin.com, the respective platform operator is responsible for processing your data, such as IP address, user agent, device information, browsing history, location, search queries, and usage times. We may process your contact information in order to respond to you.
WINDESIGN operates an online application portal under the domain windesign.jobs.personio.de/*, where interested applicants can find information about current job openings and submit application data via email, web form, or upload.
When you visit and use the career pages, we process your IP address, user agent, timestamp, request method, requested files, data volume, and status code, and store these accesses for control purposes in the log files of web servers operated by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, which acts as a subcontractor for Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, for web hosting. The legal basis is Article 6(1)(f) GDPR. The log files are automatically deleted as soon as further storage is no longer necessary.
To maintain the current session, a session cookie and, if necessary, additional technically required cookies for load balancing are stored on your device when accessing the application portal. The legal basis for processing your data through these technically required cookies is Article 6(1)(f) GDPR.
Access to your application data is granted to the HR personnel and IT administrators of WINDESIGN, Personio SE & Co. KG, as well as Amazon Web Services EMEA SARL.
The data stored with AWS is kept on servers within the EU. When using AWS servers, your data may be transferred to the USA, as AWS is headquartered there. For this reason, AWS adheres to the Data Privacy Framework. This is an adequacy decision that ensures certified companies provide an appropriate level of data protection for data transfers to the USA.
We process your application data to assess your suitability and qualifications for the position you are applying for, as well as to determine whether we can offer you a job. The specific data we process depends on the information you provide. We will use your contact details solely to inform you about the progress of the application process. The legal basis is Article 6(1)(b) in conjunction with Article 88 GDPR and § 26 BDSG.
If your application documents contain special categories of personal data, e.g., information on health or ethnic origin, we also base the processing on Article 9 (2)(b) GDPR, § 26 (3)(1) BDSG.
Your application data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. In the event that an employment relationship, training relationship, internship, or other service relationship is established after the application process, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process for you ends upon receiving a rejection. In the case of a rejection, we will store your data for six months from the time the rejection decision is communicated to you, unless longer storage is necessary to defend legal claims.
If you agree at any time and can revoke this agreement for the future in accordance with Article 6 (1)(a) GDPR, we may include you in a subsequent selection process after rejection of your application and would transfer your application data to a talent pool for this purpose. Alternatively, you are free to reapply for a later selection process.
6. Your rights under the GDPR
In accordance with Article 15 GDPR, you have the right to request information about your personal data that we process.
If we process inaccurate personal data, you have a right to rectification pursuant to Article 16 GDPR.
If the legal requirements are met, you have the right to erasure or restriction of processing of the data concerned (Article 17 and Article 18 GDPR).
Under the conditions of Article 20 GDPR, you have the right to data portability.
If we process your data because of your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing we already conducted based on the consent up to the moment of withdrawal.
In accordance with Article 21 GDPR, you have the right to object to the processing of data relating to you at any time for reasons arising from your particular situation.
According to Article 77(1) GDPR, you have the right to lodge a complaint. You can exercise this right by contacting the competent supervisory authority: www.ldi.nrw.de