Data protection

Personal data (hereinafter referred to as "data") will only be processed by us within the scope of necessity and for the purpose of providing a functional and user-friendly website, including its content and the services offered there. According to Article 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" means any operation or set of operations carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of the processing, either alone or jointly with others. In addition, we will inform you below about the third-party components used by us for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as a controller

II. Rights of Users and Data Subjects

III. Information on data processing

I. Information about us as a controller

The responsible provider of this website in the sense of data protection law is:

SNAP DISCOVERY AG

Health Campus South 17

44801 Bochum

Germany

Phone: +49 151 52552833

E-mail: info@snapdiscovery.de

Data protection coordinator is: Mr. Tobias Jokiel

E-mail: t.jokiel@snap-gmbh.com

II. Rights of Users and Data Subjects

With regard to the data processing described in more detail below, users and data subjects have the right to

confirmation as to whether data concerning them is being processed, information about the data processed, further information about data processing and copies of the data (cf. also Art. 15 GDPR);

to rectify or complete incorrect or incomplete data (cf. also Art. 16 GDPR);

to the immediate deletion of the data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary in accordance with Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;

to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (cf. also Art. 20 GDPR);

to lodge a complaint with the supervisory authority, if they are of the opinion that the data concerning them is being processed by the provider in violation of data protection regulations (cf. also Art. 77 GDPR).

In addition, the Provider is obliged to inform all recipients to whom data has been disclosed by the Provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if this notification is impossible or involves disproportionate effort. Without prejudice to this, the user has a right to information about these recipients.

In accordance with Art. 21 GDPR, users and data subjects also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 (1) (f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is admissible.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information on individual processing methods is provided below.

Server data

For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or to our web space provider via your Internet browser. These so-called server log files are used to collect, among other things, the type and version of your Internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the Internet connection from which our website is used.

This data collected in this way is stored temporarily, but not together with other data about you.

This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted after seven days at the latest, unless further storage is necessary for evidentiary purposes. Otherwise, the data will be exempted from deletion in whole or in part until an incident has been finally resolved.

a) Session cookies/session cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the Internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective and secure, as the processing e.g. enables the reproduction of our website in different languages or the offer of a shopping cart function.

The legal basis for this processing is Art. 6 para. 1 lit. b.) GDPR, insofar as these cookies data are processed for the initiation or execution of a contract.

If the processing does not serve the purpose of initiating or executing a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.

When you close your internet browser, these session cookies are deleted.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we work together for the purpose of advertising, analysis or the functionalities of our website.

For details, in particular on the purposes and legal bases of the processing of such third-party cookies, please refer to the following information.

c) Possibility of removal

You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. However, in the case of so-called Flash cookies, processing cannot be prevented via the settings of the browser. Instead, you have to change the setting of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

Customer Account / Registration Function

If you create a customer account with us via our website, we will use the data you entered during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called wish list function). At the same time, we then store the IP address and the date of your registration along with the time. Of course, this data will not be passed on to third parties.

As part of the further registration process, your consent to this processing will be obtained and reference will be made to this privacy policy. The data collected by us will be used exclusively for the provision of the customer account. If you consent to this processing, Art. 6 (1) (a) GDPR is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 (1) (b) GDPR.

You can revoke the consent given to us for the opening and maintenance of the customer account at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your withdrawal.

The data collected in this respect will be deleted as soon as the processing is no longer necessary. However, we must observe retention periods under tax and commercial law.

Contact requests / contact option

If you contact us via contact form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary to process and answer your enquiry - without providing it, we cannot answer your enquiry or at best can answer it to a limited extent. The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.

Your data will be deleted provided that your request has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as e.g. in the event of any subsequent contract execution.

User contributions, comments and ratings

We offer you the opportunity to publish questions, answers, opinions or evaluations on our website, hereinafter referred to as "contributions". If you take advantage of this offer, we will process and publish your contribution, date and time of submission as well as the pseudonym you may use.

The legal basis for this is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. All you have to do is inform us of your withdrawal.

In addition, we also process your IP and email address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps if your contribution infringes on the rights of third parties and/or is otherwise unlawful.

The legal basis in this case is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the legal defence that may be necessary.

Subscribing to posts

If you publish contributions on our website, we also offer you the option of subscribing to any follow-up contributions from third parties. In order to be able to inform you about these follow-up contributions by e-mail, we process your e-mail address.

The legal basis for this is Art. 6 (1) (a) GDPR. You can revoke your consent to this subscription at any time with effect for the future in accordance with Art. 7 (3) GDPR. All you have to do is inform us of your revocation or click on the unsubscribe link contained in the respective e-mail.

Online job applications / publication of job advertisements

We offer you the opportunity to apply to us via our website. In the case of these digital applications, your applicant and application data will be collected and processed electronically by us for the purpose of processing the application process. The legal basis for this processing is § 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) GDPR.

If an employment contract is concluded after the application process, we will store the data you provide during your application in your personnel file for the purpose of the usual organisational and administrative process – of course, in compliance with the further legal obligations.

The legal basis for this processing is also § 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) GDPR. If an application is rejected, we will automatically delete the data transmitted to us two months after the rejection has been announced. However, the data will not be deleted if the data is not available due to legal provisions, e.g. due to the burden of proof under the AGG, require a longer storage of up to four months or until the conclusion of legal proceedings.

The legal basis in this case is Art. 6 para. 1 lit. f) GDPR and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in legal defence and enforcement.

If you expressly consent to a longer storage of your data, e.g. for your inclusion in an applicant or prospective candidate database, the data will be further processed on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 (3) GDPR by declaration to us with effect for the future.

Model data protection declaration of the law firm Weiß & Partner

Social media

1. Presence in social media: We maintain profiles or fan pages in social media. When you use and access our profile in the respective network, the respective data protection notices and terms of use of the respective network or social media platform apply.

We are not the operator of this social media platform. The platform you use is another controller who processes data without our direct involvement.

Within the framework in which we carry out data processing via this platform, we comply with all relevant data protection regulations without exception. Furthermore, according to our possibilities and our knowledge, we work towards compliance with data protection regulations by the operator of the social media platform. As a rule, however, the data processing by the operator of the social media platform is beyond our knowledge and a corresponding influence on our part is not possible in these cases. For this reason, the description of the data categories and the corresponding processing under point 2 is not conclusive in terms of content and only reflects our current state of knowledge.

2. Data categories and description of data processing: usage data, contact data, content data, inventory data. Furthermore, the data of users within social networks are usually processed for market research and advertising purposes. For example, on the basis of user behavior and the resulting interests of the users, user profiles can be created. can be created. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users.

For these purposes, cookies are generally stored on the user's computer, in which the user's user behavior and interests are stored. Furthermore, the data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the opt-out options, please refer to the data protection declarations and information provided of the operators of the respective networks. In the case of requests for information and the assertion of data rights of data subjects, we would like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

3. Purpose of the processing: Communication with the parties connected on the social networks and registered users; Information and advertising of our products, offers and Services; external presentation and image cultivation; Evaluation and analysis of users and content of our social media presence.

4. Legal bases: The legal basis for the processing of personal data is our legitimate interest in the above purposes in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. If you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Art. 6 para. 1 sentence 1 lit. a) i.V.m. Art. 7 DS-GVO.

5. Data transmission/recipient category: Social network.

6. The data protection information, information options and opt-out options of the respective networks / service providers can be found here:

LinkedIn – Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) –

Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy and Opt-Out: https://www.linkedin.com/legal/cookie-policy.

Use of Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows us to analyze and improve the usage of our website.

Legal Basis

The processing of your data is based on your voluntary consent in accordance with Art. 6(1)(a) GDPR. No tracking via Google Analytics will take place without your consent.

What Data is Processed?

Google Analytics uses cookies that enable an analysis of your website usage. The following data is collected:

Anonymized IP address (truncated by the last octet)
Pages visited and time spent on the site
Visitor origin (referrer)
Device type, operating system, and browser type
Location (approximate geographic region based on anonymized IP data)

IP Anonymization

We have implemented the anonymizeIP function on this website. This means that your IP address is truncated before being transmitted to Google, ensuring that it cannot be directly linked to you.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with Google to ensure that your data is processed in compliance with GDPR requirements.

Data Transfer to Third Countries

Data may be transferred to the United States. To protect your data, Standard Contractual Clauses (SCCs) have been agreed upon with Google to ensure an adequate level of data protection.

Objection & Withdrawal of Consent

You can withdraw your consent at any time via our Consent Management Tool. Alternatively, you can prevent data collection by Google Analytics by using the Google Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout.

For more information on Google’s data processing, please refer to Google’s Privacy Policy: https://policies.google.com/privacy.