Privacy policy

Data protection

Responsible office

The protection of your personal data is important to us, the

enowa AG

Ostring 2-4

97228 Rottendorf

a special concern.

We are the responsible party in the sense of the Basic Data Protection Regulation (hereinafter “DSGVO”).

enowa is part of the ConVista Group, which consists of the sister companies ConVista Consulting AG, enowa AG, Axxiome Health GmbH and Axxiome Health Polska Sp. z.o.o and their affiliated companies,

Data Protection Officer

You can contact our data protection officer at

ConVista Consulting AG

Data Protection Officer

Im Zollhafen 15/17

50678 Cologne

dpo@convista.com

 

Processing of your data

In the following, we would like to inform you about our processing of your personal data (hereinafter also referred to as “your data”).

 

Access data

Your data

Every time you access a page from our website, as well as every time you retrieve a file or submit a form, your browser sends certain data to our server as part of its request. This data is used ad hoc by the server to provide the requested content and is stored in log files in conjunction with server-side information about the (non-) fulfillment of the request.

For the provision of requested content, the following data is processed:

  • Time (date and time) of the request
  • URL of the requested content
  • IP address
  • Amount of data transferred

The above data and additionally the following data are stored in a log file:

– Access status (file transferred, file not found, etc.).

Without the provision of this data, the use of the website is not possible.

 

Purpose of processing

The data are

  • processed ad hoc to enable the use of the website, i.e. to provide requested content, and
  • stored in log files to enable the operation of the website, i.e.
  • enable the operation of the website, i.e., e.g., to detect and correct access errors, and
  • to ensure the security of our IT systems, i.e. to recognize security-relevant accesses and to be able to take countermeasures if necessary.

Data is not passed on to third parties, neither for commercial nor for non-commercial purposes.

 

Legal basis for processing

The legal basis for the processing of access data is in each case Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing according to Art. 6 (1) lit. f DSGVO lies in the purposes described in the previous subsection.

 

Storage period

The log files are deleted or anonymized after seven days at the latest. Insofar as there is a suspicion of access relevant to security, relevant data will be retained for the duration of the prosecution of the potential attack and, if necessary, the taking of countermeasures, in particular the enforcement of legal claims.

 

Input options

Your data

Within the framework of the Internet offer, you have the possibility at some points to enter personal or business data (e.g. e-mail address, name and/or address) in order to be able to make use of services described there (e.g. to request a callback).

The data thus transmitted will be stored for the provision of the service described (e.g. on an e-mail server for sending requested material).

The provision of data is voluntary. Depending on the service, however, certain data may be necessary in order to provide the service. We then mark these accordingly.

 

Purposes of processing

The data is used exclusively to provide you with the service described in each case.

 

Legal basis for processing

The legal basis for the processing is Art. 6 (1) lit. b) DSGVO.

If you have separately consented to the processing of certain of your data, we (also) process this data on the basis of this consent pursuant to Art. 6 (1) a) DSGVO.

 

Storage period

The data will be deleted or anonymized at the latest when they are no longer required for the provision of the service described in each case, unless there are legal retention obligations to the contrary and/or we lawfully process your data for other purposes.

 

Application

Your data

When you apply to us, we process the information that we receive from you as part of the application process.

As a rule, this is your contact data, the other information provided in your letter of application and resume, as well as certificates and other evidence of your qualifications and professional experience.

The provision of your data is voluntary. However, in order to consider you in the application process and assess your suitability for the position in question, we always require your name, address, a telephone number and your e-mail address, as well as a meaningful letter of application and your resume, and, if applicable, evidence of the information provided, in particular references about your qualifications, professional experience and certifications.

We will only evaluate you based on your suitability for the position in question; you do not need to send us a photo.

As a rule, we do not require any special categories of personal data within the meaning of Art. 9 DSGVO for the application process. In view of the sensitivity of such data, please do not send us any such information from the outset, also in your own interest. If such information is exceptionally relevant to the application process, we will process it together with your other applicant data; for example, if you voluntarily provide us with information about a severe disability.

 

Purposes of processing

Your data will be processed solely for the purpose of carrying out the application process.

 

Legal basis for processing

The legal basis for processing is Section 26 (1) sentence 1 BDSG in conjunction with Article 88 DSGVO.

If you have separately consented to the processing of certain of your data, we process this data on the basis of consent pursuant to Art. 6 (1) a) DSGVO.

In the rare cases that we process special categories of your data, the legal basis for this processing is Section 26 (3) BDSG in conjunction with Art. 88 DSGVO.

 

Revocation of your consent

You can revoke your consent at any time in text form (e.g. by e-mail to recruiting@enowa.ag). We will no longer process your data after the revocation.

 

Storage period

If we are currently unable to offer you employment, we will delete or anonymize your data no later than six months after the end of the application process.

However, if there is a prospect that a suitable vacancy may arise in the future, we would like to include you in our talent pool. If you agree to this in the application form or at our request, we will store your data for as long as there is a prospect of a vacancy, up to a maximum of 2 years.

Insofar as you receive cost reimbursements or other tax-relevant transactions, the corresponding accounting records will be stored beyond this in order to fulfill the relevant retention obligations.

 

Recipients of your data

Within the ConVista Group, access to your data will only be granted to the personnel department, the responsible employees of the specialist department of the vacant position and, if required, members of the management and/or the board of directors of the companies concerned. If costs are reimbursed, the accounting department will also have access to your data to this extent.

In order to be able to show you the job advertisements and manage your data efficiently, we use the recruiting tool “Prescreen”, see https://prescreen.io/de/.

In certain cases, we have to disclose your personal data to third parties, such as to our bank if you receive a reimbursement or to the postal service if we communicate with you by letter.

 

Subscribe to job ad

Your data

If you wish, we will inform you by e-mail about interesting job advertisements from us.

To do this, we need your title, first name, last name and e-mail address, as well as information about the subject areas that interest you.

 

Purposes of processing

Your data will be processed exclusively to send you information about job advertisements from us that are of interest to you by e-mail.

 

Legal basis for processing

The legal basis for the processing is your consent (Art. 6 para. 1 lit. a) DSGVO).

 

Revocation of your consent

You can revoke your consent at any time in text form (e.g. by e-mail to info@enowa.ag). We will no longer process your data after the revocation.

 

Storage period

We will delete your data if you revoke your consent.

 

Events

Your data

If you register for an event on our website or buy tickets for it, we collect certain data to enable your participation in the event. These are usually: title, first name, last name, company affiliation, position, business address, business e-mail address, payment data.

The provision of data is voluntary. However, depending on the event, certain data may be necessary to enable your participation in the event. We then mark these accordingly.

 

Purposes of processing

The data is processed in order to be able to prepare, follow up and carry out the respective event and to enable your participation, i.e. generally in order to

  • plan the event,
  • to settle the participation fee,
  • to control your access authorization
  • issue name badges,
  • provide you with the services you have booked (e.g. a presentation stand), and
  • to provide you with information material before and after the event.

If you give your separate consent, we will include your title, first name, last name, company affiliation and position in a list of participants that is accessible to all attendees.

We also process your data to inform you about other events and other similar goods and services (see also the section “Business contacts”).

 

Legal basis for processing

The legal basis for the processing of your data for the implementation of the event is Art. 6 para. 1 lit. b) DSGVO.

If you have also separately consented to the processing of certain of your data, we will process this data on the basis of this consent pursuant to Art. 6 (1) a) DSGVO.

The legal basis for processing your data for direct marketing purposes is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest here lies in the advertising of our goods and services in terms of direct advertising.

 

Objection / Revocation

You can object to the use of your data for advertising purposes at any time with effect for the future.

You can revoke your consent at any time with effect for the future.

You are welcome to notify us of your objection or revocation by e-mail to info@enowa.ag.

 

Storage period

Your data will be stored for the purpose of conducting the event until six months after the end of the event. Billing data (invoice, etc.) will be stored in accordance with legal retention requirements.

Your data will also be stored for direct advertising purposes. If you object to this, your data will be deleted or anonymized to this extent.

 

Recipients of the data

If applicable, providers whose tools we use to process the registration procedure or the purchase of corresponding tickets, e.g. “Eventbrite”, will receive your data. If we use such tools, we will indicate this accordingly. The information on data protection of the respective providers can be found on their websites, for Eventbrite e.g. here: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de.

If we use such a tool and you do not wish to use it, you can alternatively contact us by e-mail regarding registration at marketing@enowa.ag.

 

Business contacts

Your data

If you provide us with your business contact data (e.g. first name, surname, company, position, address, e-mail address, telephone numbers) in the course of a business contact, or if you provide this data in the course of corresponding forms on our website, we will store this data in our worldwide CRM system, indicating your presumed areas of professional interest.

The provision of your data is generally voluntary. In some cases, however, the provision of your personal data constitutes consideration for a service to be provided by us free of charge (e.g. for the provision of a white paper).

 

Purposes of processing

We and the other companies of the ConVista Group use your contact data,

  • for the fulfillment of contracts with you or your employer, e.g. in the context of the implementation of an IT project,
  • upon your request, for pre-contractual measures, e.g. for sending requested information about our range of services or an offer,
  • for direct advertising of our own goods or services that are similar to the goods or services that you or your employer have requested or that we have provided to you or your employer. For example, by sending you specialist information on current topics, interesting service offers or offers for individual advice on your current professional and technical challenges,
  • insofar as you have given us consent to process your contact data (e.g. for the Business Partner Program).

 

Legal basis for processing

We and the other companies of the ConVista Group use your contact data,

  • for the fulfillment of contracts with you or your employer, e.g. in the context of the implementation of an IT project,
  • upon your request, for pre-contractual measures, e.g. for sending requested information about our range of services or an offer,
  • for direct advertising of our own goods or services that are similar to the goods or services that you or your employer have requested or that we have provided to you or your employer. For example, by sending you specialist information on current topics, interesting service offers or offers for individual advice on your current professional and technical challenges,
  • insofar as you have given us consent to process your contact data (e.g. for the Business Partner Program).

Recipients

The companies of the ConVista Group have access to your data and, if necessary, process it for the purposes described above.

Objection / revocation of your consent

You may object to the processing of your data for direct marketing purposes at any time with effect for the future.

You can revoke your consent at any time with effect for the future.

You are welcome to notify us of your objection or revocation by e-mail to info@enowa.ag.

 

Storage period

The data will be deleted or made anonymous at the latest if and insofar as you have objected to the use of your data or revoked the consent you have given, insofar as there are no retention obligations to the contrary and/or we are lawfully processing your data for other purposes.

 

Cookies

Cookies

Your data

Cookies are small text files that are sent from our server to your computer and stored there. These can contain different information, which can be read by our server during the current and a future visit of the website and described with additional information.

We use the following cookies on various pages of our website:

Session cookie

When you visit the website, a so-called session cookie is placed on your computer. This contains a sequence of digits, which makes it possible to store settings selected by you within the framework of the website on the server for the duration of your browser session and to assign them to the cookie. This means, for example, that all (sub)pages of the website can be delivered to you in the language version you have selected, without having to select the language for each of these pages again.

Permanent cookie

In order not to show you our banner reference to the use of cookies within the scope of our web offer again after you have closed the same, a cookie with the corresponding information is set when the banner is closed.

Google Analytics

With regard to the setting of cookies within the framework of the Google Analytics analysis tool, please note the corresponding point in this data protection declaration.

Of course, you also have the option to use our offer without cookies. In the settings of the browser you use, you can specify whether you want to accept the setting of cookies. Most browsers automatically accept them in their default settings. If you want to prevent the setting of cookies, you can select the appropriate settings in your browser, for example, “Do not accept cookies” or similar. These can often be found under a menu item “Privacy” or similar. In this case, we would like to point out that you may not be able to use all the functions of our website in full.

 

Purposes of processing

We use cookies to make your visit to our website attractive and to enable you to use certain functions described above, e.g. to enable you to select the language of the offer and to take this into account.

 

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing lies in the purposes described in the previous paragraph.

 

Storage period

Session cookie

This cookie and the server-side data assigned to it are deleted after the end of the browser session.

Permanent cookie

This cookie remains on your computer, unless you delete it, until the expiration period set. This period is 365 days.

Google Analytics

With regard to the setting of cookies within the framework of the Google Analytics analysis tool, please refer to the corresponding point in this data protection declaration.

 

Google Analytics

Your data

Within the framework of the website, visitor accesses are evaluated by means of Google Analytics, a website analysis service from Google, in order to be able to continuously improve the website.

In particular, the following information is collected:

  • IP address
  • (Sub-)pages visited
  • Your behavior on the pages (for example, clicks, scrolling behavior and dwell time)
  • Your approximate location (country and city)
  • Technical information such as browser, Internet service provider, terminal device and screen resolution
  • Source of origin of your visit (i.e. via which website or advertising medium you came to us)

You can prevent cookies from being set by making the appropriate settings in your browser software, as described under “Cookies”.

Your IP address is collected to ensure the security of the analysis service and to provide us with information about which country, region or city you are accessing from. However, your IP address is shortened in the course of the collection even before it is stored, thus pseudonymizing your data.

 

Purposes of processing

We use Google Analytics to analyze the use of our website and to be able to continuously optimize and further develop the website and its user-friendliness as well as our other external appearance and our range of services on this basis.

 

Legal basis for processing

The legal basis for the processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing lies in the purposes described in the previous subsection.

 

Storage period

The individual visit is deleted 14 months after collection.

 

Recipients of your data

Google Analytics is provided by Google LLC, USA. This company receives your data in order to provide us with the analysis service.

 

Transfer to third countries

As described above in the section “Recipients of your data”, your data will be transferred to the USA, where there is no data protection law comparable to that of the EU. Agreements on data protection including the so-called “standard contractual clauses” of the EU have been concluded with Google in this regard. In addition, your data will be pseudonymized (see section “Your data”).

 

Objection

If you do not agree with the analysis of data about your visit to the website, you can disable the analysis by preventing the setting of cookies by selecting the appropriate settings on your browser software, as described in the section “Cookies”. You also have the option of using a browser add-on to generally deactivate Google Analytics. You can download this here: https://tools.google.com/dlpage/gaoptout?hl=de.

Please note that you must implement the measures described above separately for each browser software and/or end device you use, if desired.

 

YouTube videos

Your data

On some pages of our website we have embedded videos from YouTube (a Google company). The videos are stored on https://www.YouTube.com and can be played directly from our website. (Only) If you click on the notice window located above the video, a connection to YouTube is established and the video is loaded. We have integrated the videos in the so-called “extended data protection mode” so that, according to YouTube, no cookies are set to collect user activity. Nevertheless, various personal data are transmitted directly to YouTube when the connection is established. We have no influence on the data transmission and the further use of your data.

If you activate the connection, YouTube receives, among other things, the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section “Access data” of this privacy policy will be transmitted. This occurs regardless of whether you are logged in to YouTube via a user account or whether no user account exists. If you are logged in to YouTube/Google, this and other data may be assigned directly to your account. YouTube/Google may store your data as usage profiles and use them, among other things, for the purposes of advertising, market research and/or demand-oriented design of its website.

For more information on data processing by YouTube/Google, please see their privacy policy(s): https://policies.google.com/privacy?hl=de.

 

Purposes of processing

The integration of the videos is done in order to offer you the opportunity to perceive interesting information directly within our website.

 

Legal basis for processing

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a DSGVO. You grant this by clicking on the information window above the video.

 

Storage period

We do not store any of the data mentioned here. Regarding our storage of usage and analysis data, please read the relevant points of the privacy policy.

 

Recipients of your data

YouTube is provided by YouTube LLC, USA a company of Google Inc, USA. These companies receive your data (only) when you activate the connection as described in the section “Your data”.

 

Transfer to third countries

Your data will be transferred as described above in the section “Recipients of your data” to the USA and, if applicable, to other third countries outside the EU/EEA in which no data protection law comparable to the EU exists.

 

Vimeo videos

Your data

On some pages of our website we have embedded videos from Vimeo. The videos are stored on https://www.vimeo.com and can be played directly from our website. (Only) If you click on the information window above the video, a connection to Vimeo is established and the video is loaded. We have integrated the videos in such a way that, according to Vimeo, no cookies are set to collect user activity. Nevertheless, when the connection is established, various personal data are transmitted directly to Vimeo. We have no influence on the data transmission and the further use of your data.

If you activate the connection, Vimeo receives, among other things, the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section “Access data” of this privacy policy will be transmitted. This occurs regardless of whether you are logged in to Vimeo via a user account or whether (k)a user account exists. If you are logged in to Vimeo, this and other data may be assigned directly to your account. Vimeo may store your data as usage profiles and use them, among other things, for the purposes of advertising, market research and/or demand-oriented design of its website.

For more information on data processing by Vimeo, please see their privacy policy(s): https://vimeo.com/privacy.

 

Purposes of processing

The integration of the videos is done in order to offer you the possibility to perceive interesting information directly within our website.

 

Legal basis for processing

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a DSGVO. You grant this by clicking on the information window above the video.

 

Storage period

We do not store any of the data mentioned here. Regarding our storage of access, usage and analysis data, please read the relevant points of the privacy policy.

 

Recipients of your data

Vimeo is provided by Vimeo LLC, USA. This company receives your data (only) when you activate the connection as described in the section “Your Data”.

 

Transfer to third countries

Your data will be transferred to the USA as described above in the section “Recipients of your data” and, if applicable, to other third countries outside the EU/EEA in which no data protection law comparable to the EU exists.

 

Podigee / Podcasts

Your data

On some pages of our website we have integrated podcasts via Podigee. The podcasts are stored on https://www.podigee.com/de and can be played directly from our website. (Only) If you activate the service via the cookie consent tool, a connection to Vimeo is established and the podcasts are loaded. We have no influence on the data transmission and the further use of your data.

If you activate Podigee, Podigee receives, among other things, the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section “Access data” of this privacy policy will be transmitted. This is done regardless of whether you are logged in to Podigee via a user account or whether (no) user account exists. If you are logged in to Podigee, this and other data may be directly associated with your account. Podigee may store your data as usage profiles and use them, among other things, for purposes of advertising, market research and/or demand-oriented design of its website.

For more information on data processing by Vimeo, please see their privacy policy(s): https://www.podigee.com/de/ueber-uns/datenschutz.

 

Purposes of processing

The integration of the podcasts is done to provide you with the opportunity to perceive interesting information directly within our website.

 

Legal basis for processing

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a DSGVO. You grant this by means of the cookie consent tool.

 

Storage period

We do not store any of the data mentioned here. Regarding our storage of access, usage and analysis data, please read the related points of the Privacy Policy.

We can only view anonymous usage statistics at Podigee (e.g. which podcasts were accessed and how often).

 

Recipients of your data

Podigee is provided by Podigee GmbH, Berlin. This company receives your data (only) when you activate the connection as described in the section “Your data”.

 

Transfer to third countries

Your data may be transferred to the USA and other third countries outside the EU/EEA where no data protection law comparable to the EU exists. Please see Podigee’s privacy policy (linked under “Your Data”).

 

Leadlab

Your data

On our website, we use the Leadlab tool from WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. This uses a counting pixel technology. Your IP address is processed in the process. The processing takes place exclusively for the purpose of collecting company-relevant information such as the company name. IP addresses of natural persons are excluded from further use (whitelist procedure). The IP address is not stored in LeadLab under any circumstances.

 

Purposes of processing

The tool is used for the purpose of collecting company-relevant information such as the company name.

WiredMinds GmbH uses this information to create anonymous usage profiles for us, based on visitor behavior on our website. The data obtained in this way is not used to identify you personally as a visitor to our website.

 

Legal basis of the processing

When processing data, it is our particular interest to safeguard the data protection rights of natural persons. Our interest is based on Art. 6 (1) lit. (f) DSGVO.

The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO.

Our legitimate interest lies in optimizing our website offering and providing targeted information about our range of services.

 

Objection

You can object to the recording of your visit by the tool here:

Exclude from tracking (To permanently exclude you from tracking by WiredMinds LeadLab on this website, a technically necessary cookie is set).

 

Storage period

We do not store any of the data mentioned here. Regarding our storage of access, usage and analytics data, please read the related points in the Privacy Policy.

 

Recipients of your data

Leadlab is provided by WiredMinds GmbH and receives your data.

 

Your rights

As far as we process your data, you have the following rights towards us. You are welcome to send corresponding requests by e-mail to info@enowa.ag.

You have a right to …

Information

Upon request, we will be happy to inform you whether and to what extent we process your data.

You can find more details about your right to information in Art. 15 of the GDPR.

Correction

If you wish, we will correct and/or complete your data.

Under which conditions this is possible and everything else about your right to rectification can be found in Art. 16 of the GDPR.

Restriction of processing

You can ask us to restrict the processing of your data.

Under which conditions this is possible and everything else about your right to restriction of processing can be found in Art. 18 of the GDPR.

Deletion

You can ask us to delete your data.

Under which conditions this is possible and everything else about your right to erasure can be found in Art. 17 of the GDPR.

Information in connection with rectification, restriction or deletion.

Upon request, we will be happy to inform you to which recipients of your data we have communicated a correction, deletion or restriction of your data that has taken place.

Everything else about your right to such information can be found in Art. 19 of the GDPR.

Objection

You may object to the processing of your data.

For the conditions under which an objection is possible, please refer to Art. 21 of the GDPR.

Complaint to a supervisory authority

You can complain to a supervisory authority at any time if you believe that the processing of your data violates data protection law.

If you have any questions or requests regarding data protection, you can of course also simply contact us at any time: dpo@convista.com.

 

Edit Settings