Privacy.

Information regarding data protection.

The safety and the protection of your data are important to us, Grabarz & Partner Werbeagentur GmbH, Schaartor 1, 20459 Hamburg (hereinafter referred to as “G&P” or “we”). Therefore, we operate our websites in accordance with the applicable legal regulations regarding the protection of personal data and data security, in particular the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), the Digital Services Act (DDG) and the New German Telecommunications-Telemedia Data Protection Act (TDDDG).

In this context, we would like to inform you about which data we collect, process and use during the use of our website, for which purpose and the legal basis on which this is carried out in each case and with whom we may share it.

Scope, Responsible position.

This information regarding data protection applies to the web presences accessible at the domains

  • grabarzundpartner.de
  • grabarz-jmp.de

(“website”).

Responsible as per the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection regulations is

Grabarz & Partner Werbeagentur GmbH
Schaartor 1
20459 Hamburg
Amtsgericht Hamburg, HRB 52097
datenschutz-grabarz(at)grabarzundpartner(dot)de

General Information regarding data processing.

We process your personal data only to the extent necessary for the provision of our offering. In addition, we only process personal data if you provide us with this data, for example in the context of a registration, by filling out forms, sending e-mails and inquiries or through other services. We will only use the personal data which you have provided for the purposes of contract fulfilment and processing your requests. Legal ground for this is Art. 6 (1)(b) GDPR.

The processing and use of your personal data for other purposes, such as consulting, advertising and market research, only occurs if you have previously consented to the corresponding use or we are required or entitled to process the data because of a statutory provision. If a corresponding consent was requested, the processing of your data is based on Art. 6 (1)(a) DSGVO or Section 25 (1) TDDDG, insofar as the consent includes access to information on your terminal device within the meaning of the TDDDG.

You may withdraw your consent regarding the use of your personal data for the future at any time by sending an e-mail to the e-mail address specified at the end of this data protection notice.

provision of the website and creation of log files.

When the website is used for informational purposes only (i.e. without registration), we only collect the personal data that your browser transfers to our server. When you access the website, we collect the following data which is technically necessary in order to enable you to visit the website and to ensure the stability and security (the legal basis is article 6, paragraph 1, sentence 1 of the General Data Protection Regulation):

  • Websites from which you accessed our website
  • Date and time of the access
  • Name of the Internet access provider
  • Browser type/version and language
  • The operating system used
  • Access status/HTTP status code
  • The quantity of data transferred
  • Device (PC, tablet PC or smartphone)
  • Our pages visited including visit time
  • The last website you visited

This data is analysed for statistical purposes only. There is no person-based analysis. The temporary storage of your IP address is necessary to enable your terminal device to access the website. This requires the IP address of the user to be saved for the duration of the session.

Data security.

We utilise appropriate technical and organisational measures to ensure that the data collected within the scope of the use of the services provided by us is protected against loss, incorrect changes or unauthorised access by third parties. Our security precautions are continually being revised and improved accordingly in keeping with technological advances.

etracker.

We use the etracker service to analyse user behaviour on this website. This service is provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany (www.etracker.com). We use etracker in such a way that no cookies are set. The data collected by the service is processed and stored by etracker exclusively within Germany on our behalf. The legal basis for the data processing by etracker is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest relates to the optimisation of our website. Login or device identifications are converted by etracker into a unique key that is not assigned to any individual person. etracker does not use the data in any other way and does not combine it with other data or share it with third parties. You can object to the collection and storage of your visitor data by etracker at any time with future effect by clicking on the following button



By clicking the button, an Opt-Out-Cookie named "et_oi_v2" will be set by etracker. Please do not delete this cookie as long as you wish to maintain your objection. In this case, no visitor data from your browser will be collected and stored by etracker in the future. For more information, see the etracker privacy policy available at https://www.etracker.com/en/data-privacy/

Social networks.

Our website includes links to the external social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"), Instagram, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Instagram"), LinkedIn, which is operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA („LinkedIn“) as well as to x.com, which is operated by Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Irland ("X"). Legal ground for this is Art. 6 (1)(f) GDPR. The links on our website are identified by the Facebook logo, the Instagram logo, the LinkedIn logo or the X logo (no plugins are used). If these links are followed by clicking on them, your browser will establish a direct connection with the servers of Facebook, Instagram, LinkedIn or X. If you follow the links during your visit to our website and are logged in using your personal user account with Facebook, Instagram, LinkedIn or X, the information that you have visited our website will be forwarded to Facebook, Instagram, LinkedIn or X. In this case, Facebook, Instagram, LinkedIn or X can link the visit to the website to your account.

The link to the privacy policy of Facebook is available here:
www.facebook.com/about/privacy/

The link to the privacy policy of Instagram is available here:
https://help.instagram.com/519522125107875/

The link to the privacy policy of Facebook is available here:
https://linkedin.com/legal/privacy-policy

The link to the privacy policy of X is available here:
https://x.com/privacy/

Events.

You can participate in our events. For the proper organisation of the event, it is necessary that you register for the respective event and provide us with your contact details, name of your company as well as your position within the company via a contact form on our website. We process your data exclusively for the purpose of carrying out the events. The legal basis for this is Art. 6 (1)(b) GDPR.

We will only store the data provided by you for as long as is necessary to achieve the purpose for which it was collected and then delete it. The deletion will therefore take place either after the end of the event or, if we are required by applicable statutory provisions to retain the data for a longer period (for example, for tax reasons in the case of events for which a fee is charged), at a later date.

Handling of applicant data.

We offer you the opportunity to apply for a job with us (e.g. by e-mail, post or via the online application form on our website). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated in strict confidence.

Scope and purpose of data collection.

When you send us an application, we collect your associated personal data (contact and communication data, application documents (in particular cover letter, letter of motivation, CV, certificates, references), information in the context of job interviews) and process the data to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG, Art. 6 para. 1 lit. b DSGVO in conjunction with. § 26 BDSG. Your personal data will be processed within our company of the Grabarz & Partner Group (these are Grabarz & Partner Service & Holding GmbH & Co. KG, Grabarz & Partner Werbeagentur GmbH and Grabarz XCT GmbH) exclusively to persons who are involved in the processing of your application (these are the employees of the personnel department and the decision-makers of the respective specialist departments).

If the application is successful, the data submitted by you will be processed based on § 26 BDSG and Art. 6 para. 1 lit. b DSGVO in conjunction with. § 26 BDSG for the purpose of implementing the employment relationship stored in our data processing systems.

Retention period of the data.

If we are unable to offer you an employment relationship, if you reject an offer of employment or withdraw your application, we reserve the right to retain the data you have provided for up to 6 (six) months from the termination of the application process (rejection or withdrawal of the application). Thereafter, the data will be deleted and the physical application documents destroyed. Retention serves in particular for purposes of proof in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.

If you give your consent, we will store your data collected during the application process in our applicant database for a period of up to 3 (three) years even after the end of the application process for the purpose of enabling subsequent contact for professional purposes and possible consideration for future job placements by the companies of the Grabarz & Partner Group (these are Grabarz & Partner Service & Holding GmbH & Co. KG, Grabarz & Partner Werbeagentur GmbH and Grabarz XCT GmbH). The legal basis for this is § 26 BDSG, Art. 6 para. 1 lit. a DSGVO in conjunction with. § 26 BDSG. Subsequently, the data will be deleted and the physical application documents destroyed.

You can revoke your consent at any time and without justification with effect for the future (e.g. by e-mail to recruitment@grabarzundpartner.de). Further consideration of the data for open positions will not take place in the event of revocation. The data will then be deleted in accordance with the statutory provisions.

Your rights.

To the extent that we process your personal data, you are regarded as an effective person as defined by The GDPR, and are entitled to the following rights:

Right of access.

You can request confirmation from us as to whether we process personal data related to you.

If this is the case, you can request information from us about the following:

(a) The purposes for which the personal data is processed;

(b) The categories of personal data which are processed;

(c) The recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;

(d) The planned duration of the storage of your personal data or, if this specific information is not available, the criteria for determining the storage duration;

(e) The existence of a right to correction or deletion of personal data relating to you, the right to limitation of processing by the responsible body or the right to refuse this processing;

(f) The existence of a right of complaint to a supervisory authority;

(g) All available information about the origin of the data if personal information is not provided by yourself but rather by third parties.

You have the right to demand information as to whether or not your personal data is transferred to a third country or an international organisation. In this context, you have the right to request the appropriate guarantees in accordance with article 46 GDPR with regard to the transmission.

Right to correction.

You have the right to correct and/or complete information if your personal data processed by us is incorrect or incomplete. If this is the case, we will make the correction immediately.

Right to limitation of processing.

Under the following conditions, you are entitled to request a restriction of the processing of your personal data:

(a) if you contest the correctness of your personal data for a period of time that allows us to verify the correctness;

(b) the processing is unlawful and you reject the deletion of your personal data and, instead, demand the restriction of the use of the personal data;

(c) we no longer require your personal data for the purposes of the processing, yet you still require this data in order to assert, exercise or defend against legal claims, or

(d) if you have submitted an objection to the processing in accordance with article 21, paragraph 1 of the GDPR and it has not yet been decided whether our legitimate reasons as the body responsible outweigh your reasons as the affected person.

If the processing of your personal data has been restricted, this – with the exception of its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims, or to protect the rights of another natural or legal person or for reasons of substantial public interests of the Union or a Member State can be processed.

If the restriction of processing itself has been restricted as a consequence of the above-mentioned requirements, we will inform you before the restriction is lifted.

Right to deletion.

Mandatory deletion.

You are entitled to request that we delete your personal data immediately provided that one of the following reasons applies:

(a) Your personal data is no longer necessary for the purposes for which it was collected or processed in any other way.

(b) If the processing was based on article 6, paragraph 1 of the GDPR, and you withdraw your consent and there is no further legal basis for the processing.

(c) You object to the processing in accordance with article 21, paragraph 1 of the GDPR and there are no superseding, legitimate reasons for the processing, or you object to the use of your personal data for advertising purposes in accordance with article 21, paragraph 2 of the GDPR.

(d) Your personal data has been processed unlawfully.

(e) The deletion of your personal data is required to fulfil a legal obligation.

Exceptions.

The right of deletion does not apply provided that the processing is required

(a) in order to exercise the right to freedom of expression and information;

(b) in order to fulfil a legal obligation or for the performance of a task carried out in the public’s interest;

(c) for the assertion, exercise or defence of legal claims.

Right to file a complaint with a supervisory authority.

Regardless of other legal remedies, you have the right to file a complaint with a responsible supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR.

Withdrawal of consent.

To the extent that the processing of personal data is based on your consent in accordance with article 6, paragraph 1 of the GDPR, you may withdraw your consent at any time effective for the future by sending an e-mail to datenschutz-grabarz(at)grabarzundpartner(dot)de

Contact / Information.

You can send all inquiries, explanations and questions relating to the usage of the data to our Privacy Officer via e-mail to
datenschutz-grabarz(at)grabarzundpartner(dot)de or by regular mail to
Grabarz & Partner Werbeagentur GmbH, Schaartor 1, 20459 Hamburg, Germany.