AerQ GmbH for www.aerq.com
Privacy Policy: Data protection statement
1. Controller
We, AerQ GmbH, Hindenburgstraße 162, 22297 Hamburg, Germany, (hereinafter also referred to as "we" or "us"), hereby provide you with information on the processing of your personal data collected as part of your use of our website https://www.aerq.com/ ("website").
If you have further questions on the subject of data protection in connection with our website or the services offered on it, please contact our data protection officer:
Data protection officer of the AerQ GmbH
Email: datenschutz@dlh.de
2. Scope and purpose of and legal basis for the processing of personal data
We collect and use personal data directly from our users or from other sources (see below) in the following situations:
2.1. Provision of the website and creation of log files
Whenever users visit our website, our system automatically records data and information from the computer system used to call our website. The following data ("technical information") is collected in the process:
We collect and use this technical information for purposes of (network) security (such as to combat cyberattacks), marketing, and to be able to better understand our users' needs, as well as to continuously improve our website and to enable us to deliver the website to the user's computer system.
The data is likewise stored in our system's log files. This data is not stored together with other personal data of the user.
The data is stored in log files in order to ensure that the website functions properly. This data also helps us optimize the website and ensure the security of our IT systems.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).
2.1.1. Use of cookies
Our website uses cookies. Cookies are text files that are stored in your web browser. If you call a website, a cookie may be stored on your operating system. This cookie contains a characteristic string that allows your browser to be identified unambiguously if you call the website again. There are two types of cookies:
- session cookies, which are temporary and are erased when you close your browser at the end of your surfing session. The next time you visit our website it will not recognize you and will treat you as a new visitor.
- persistent cookies, which stay in one of your browser's subfolders until you delete them manually or your browser deletes them based on the duration period contained within the persistent cookie's file.
Cookies are stores on your computer system and are transferred to our site. You can disable or restrict the transfer of cookies by changing the settings in your web browser. This process can be automated. If cookies are disabled for our website, you may no longer be able to use all of the website's features in full.
The cookies on your device can be deleted by yourself via the settings on your device.
We use cookies to provide you with the following functionality or information:
2.1.2. Tracking tool
We use the following tracking tool on our website:
The legal basis for using it is our legitimate interests in accordance with Article 6(1)(f) of the GDPR for the purpose of enhancing the efficiency of our website and (direct) marketing.
You can find more information on Matomo in section 7 "Tracking tool: Matomo."
2.2. Use of the services offered on our website
We offer a number of services on our website. To provide those services, we must collect and process personal data from our users
2.2.1 Data usage in the application management system
This is the data privacy policy of LG-LHT Aircraft Solutions GmbH, LG-LHT Passenger Solutions GmbH and AerQ GmbH. This document is for informational purposes only. The legally binding version is always the German version of this document.
Between the parties
AerQ GmbH (A),
LG-LHT Aircraft Solutions GmbH (B) and
LG-LHT Passenger Solutions GmbH (C)
there is a contractual relationship ("main contract") involving the joint processing of data relating to applications by the controllers (A), (B) and (C). The parties agree that they jointly determine the purposes and means of processing within the meaning of Art. 4 No. 7 DSGVO with regard to this cooperation and that they are jointly responsible in this respect.
2.2.1.1 Preamble
AERQ uses an e-recruiting system named “Prescreen” (Prescreen International GmbH, Mariahilfer Straße 17, 1060 Vienna, Austria) on the *.jobbase.io domain (hereinafter referred to as “jobbase.io”), where we advertise job vacancies and receive and manage applications. Within the framework of these activities, AERQ processes personal data with regard to your application. In terms of data protection legislation, AERQ is designated as a controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR). Prescreen acts in this relationship as a processor within the meaning of Art. 4 (8) GDPR. The protection and confidentiality of your data are of particular importance to AERQ. Of course, your data are processed exclusively in accordance with the relevant data protection provisions. This Data Protection Policy also meets all of the statutory requirements that are mandatory with the enactment of the European General Data Protection Regulation (GDPR). If you have any questions about this Data Protection Policy, you can contact AERQ by email at data.protection@aerq.com.
2.2.1.2 What data are collected?
User accounts
To register for our application management system each user has to set up a user account. A user account consists of at least the following information:
Besides, for the automated processing of your application, the following data are collected and processed:
We store the written electronic communication that takes place between you and AERQ within the Prescreen e-recruiting system. In addition, we process comments and assessments that are written about you in the course of your application process.
2.2.1.3 Login via Social Media Networks
This function enables you to register with one of your existing social media network user account (Xing). In so doing, the only thing that is verified is whether you have a valid account with the selected social media network, which you can use to login here. The result of this check is then automatically transferred to the application management system. However, be reassured that no further exchange of data takes place between AERQ and your social media network.
2.2.1.4 Application relevant data
Following the completion of the application process, the answers and information you have given during your online application process will be stored along with your name. This statistical data record does not allow any type of inference to the actual person and serves solely as a basis for statistical evaluations. Further recruitment procedures will follow in subsequent application steps. A negative test result will also be relevant for applications to similar jobs within the AERQ Group.
2.2.1.5 Applications to a job offer
If you have applied to a job offer your data will be made available to the specialized department which posted the position as well as to the relevant personnel department.
2.2.1.6 Simultaneous application for jobs in different companies of the AERQ Group
In the event that an applicant applies to multiple job positions with different companies in the AERQ Group, those personnel departments which were directly applied to will be made aware of all simultaneous applications. This is done to ensure efficient handling of applications. Application data will not be shared.
This does not have any effect on current application processes.
2.2.1.7 TalentPool participation
A user account and a completed profile are required in order to participate in Talentpool. The collection and processing of personal data takes place only to ensure network activities such as i.e. to contact Talents or to send vacant job offer suggestions. The Talentpool is a AERQ Group-wide network. Access to Talent profiles is therefore available across all companies within the Group. Data processing outside of the AERQ Group does not occur. The Talents must renew their data protection policy consent every six months, if the extension consent is not granted, the data is deleted.
2.2.1.8 Recommendation by AERQ staff members
You can be referred to AERQ by our staff members. Therefore, you need to state the referring person’s name in your cover letter and the referring person needs to inform us via email about your application. By including the referring person’s name in your cover letter you are also declaring your consent that this person be informed whether your application resulted in a contract or not. The reason here is that a bonus may result for the recommending staff member.
2.2.1.9 Security when dealing with person-related data
Your data is automatically encrypted during its transfer into our application management system. The precautions taken to protect data always correspond to the current status of technology.
2.2.1.10 How long is your data stored?
The storage retention period of a user account is 6 months, starting from the date of rejection of the application. After 6 months the acceptance of the data protection regulations must be renewed by the user. If the renewal is made, account storage is prolonged for a further 6 months.
If the user still has an open application in process at the time of expiration, then the storage retention period is automatically prolonged until this application process is completed.
If you prefer a longer storage period of one year for your application process (to continue your application at a later date, for example), we request that you adjust the settings accordingly when you register.
Longer storage periods may also result from the fact that the data are required to assert, exercise or defend legal claims in respect of the authorities or if statutory storage periods apply. The data will be stored as long as necessary to fulfil these purposes.
2.2.1.11 Your rights with regard to stored data
You have the right to free information about the personal data about you that we process, as well as the right to correct and erase data, to limit data processing, and the right to data transferability. If you wish to assert these rights or obtain further information about them, please send an email to AERQ at data.protection@aerq.com.
As a matter of principle, our Data Protection Policy and our responsibility and liability in this connection does not cover websites of third-party providers to which we provide links or to which you are forwarded. We are also not responsible for subsequent data processing by the operators of those websites in such cases.
2.2.1.12 What are cookies?
PHPSESSID
Session Cookie
Function
This cookie is used to identify the user during his/her use of Prescreen. The cookie is essential for the website to function properly. The cookie ceases to be valid once the browser is closed.
jobbase.io
REMEMBERME
Persistent Cookie
Function
This cookie is used to restore a session that has timed out. The cookie ceases to be valid after two weeks.
jobbase.io
2.2.1.13 Withdrawal option
You may at any time withdraw any consent you may have given as required by data protection law, with effect from that point forward. If you wish to exercise your right to withdraw, please send an email to AERQ at data.protection@aerq.com.
If we use cookies that require consent on our website and you have also agreed to their use, you can withdraw that consent on our website in the “Cookies” section. You will find further information about cookies under the section, “What are cookies”.
2.2.1.14 Purpose of data collection
Prescreen processes and uses the personal data collected to provide Prescreen services, for the purposes of registration on the companies’ websites, and for the purposes of sharing information between applicants and companies. We wish to draw your attention to the fact that for the purposes of direct advertising Prescreen will send you electronic messages about new job offers from companies to which you have previously applied. On behalf of those companies, Prescreen processes your name, your email address and the data that you entered on your previous application. You can object to receiving these messages at any time by emailing Prescreen at support@prescreen.io.
2.2.1.15 Are data transferred to or collected by third parties?
Data collected within the context of your application are not published or forwarded without authorisation, i.e. without your consent, to third parties. Apart from our employees who process your data in the course of providing our services, we transfer your data to the following recipients:
If AERQ wishes to use your data in a way that goes beyond that described above, AERQ will first obtain your express consent.
2.2.2. Newsletters
On our website you can subscribe to free newsletters. The data entered in the contact form when registering for the newsletter is sent to us and processed:
The following data is also collected during registration:
The following data on usage behavior is collected:
During registration, your consent to the processing of the data is obtained and your attention is drawn to this data privacy statement.
Contact data and data on usage behavior are stored electronically and analyzed and processed solely by AerQ GmbH for the purpose of improving its customer service and sending out newsletters.
We process your data in connection with the newsletters in order to send you news on interesting topics from the world of AERQ.
The following only applies to the registration for the newsletters: We also process and use registration and usage data to send you your newsletter with personalized and tailored content.
The legal basis for processing data after the user has registered for the newsletter is Article 6(1)(a) of the GDPR in cases where the user has given consent.
2.2.3 Marketing activities
We also process your personal data for the purpose of marketing materials, including online advertising tools, see chapter 9.
This is done in order to give the best possible advice, for knowledge- and intelligence gathering and analysis purposes, in order to create a complete customer picture and get a bigger understanding on the demands and behaviours of our customers. We utilise this knowledge to create more customised user experiences and optimize the communication with our customers.
2.2.4 Contact forms
You can address inquiries to us and get in touch with a specific contact person using various contact forms. To do this, you must provide your contact information. You will find the following contact forms on our website:
2.2.4.1. Customer contact data
Contact data which a sales employee at AerQ GmbH receives from the employees of our potential or actual customers for the purpose of business communication is recorded in our CRM system and is thus also available to other departments within the company for that purpose.
2.2.5 Statistical analyses
We analyze your data in a data warehouse so that our users' preferences can be evaluated ("statistical analyses"), to enable marketing oriented to users' interests, personalized user address and the continuous optimization of our business processes. We process the data in this way to gain a better understanding of what our customers expect from us and to be able to offer them personal communication tailored to their needs. These analyses also help us in fraud detection, auditing, and ensuring security, i.e. we process the data to safeguard our legitimate interests in accordance with Article 6(1)(f) of the GDPR.
Use cases needs to be defined above under 2.2
2.2.6 Geolocalization
Besides persistent cookies we use your location (country and region) determined from your IP to provide the following geolocalization-functionality:
As long as the geo-information is not used within your newsletter registration, the data is deleted by ending your session on our homepage and not further stored.
2.3. Our legitimate interests in processing personal data
Where Article 6(1)(f) of the GDPR is the legal basis for processing, our legitimate interests – apart from the purposes stated above – are:
2.4. Other processing obligations
Where we are obligated by law, we process personal data to comply with retention obligations under commercial law or to meet statutory requirements relating to security (such as those pursuant to Section 7 of the German Aviation Security Act (LuftSiG)). You can find more information on retention periods in the section "Duration of data processing" below.
3. Duration of data processing
Your personal data is erased as soon as it is no longer required for the specified purposes. It may be the case that personal data is retained for the period of time in which claims may be asserted against AERQ GmbH. In addition, personal data is stored if and for as long as AERQ GmbH is obligated by law to do so. Such documentation and retention obligations are stipulated by the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Money Laundering Act (GwG), among others. Under this legislation, storage may be required for up to ten years.
4. Disclosure of personal data to third party
We may be required to forward your personal data to third parties within or outside AerQ GmbH in order to be able to offer you our products and services on the basis of our contractual obligations or our legitimate interests. These recipients can be categorized as follows:
In the process, personal data may be transferred to third countries or international organizations. In order to protect you and your personal data, there are suitable safeguards in such cases as stipulated by and in compliance with statutory requirements (in particular the use of EU standard contractual clauses) or there is an adequacy decision adopted by the EU Commission (Article 45 of the GDPR).
You can find information on EU standard contractual clauses at [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF]. The EU Commission provides information on its adequacy decisions at [https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en#dataprotectionincountriesoutsidetheeu].
We are also obligated by law to provide personal data to German and international authorities (Article 6 (1) point (c) of the GDPR in conjunction with local and international regulations and agreements.
5. Rights of data subjects
AERQ Group is committed to the fair and transparent processing of data. We therefore believe it to be important that data subjects not only have the right to object, but can also exercise the following rights if the relevant legal requirements are fulfilled:
You can contact data.protection@aerq.com by e-mail to exercise your rights. To handle your request and for the purpose of identification, we note that we will process your personal data in accordance with Article 6(1)(c) of the GDPR.
You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for AERQ is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str 22, 7. OG
20459 Hamburg
Germany
Phone: +49 40 42854-4040
Fax: +49 40 4279-11811
E-mail: mailbox@datenschutz.hamburg.de
6. Consent
If you have given us your consent to process your personal data, we note here that you can revoke this consent at any time.
If you have given us your consent to send you the newsletter, you can revoke it by clicking on the "Unsubscribe" link in the newsletter itself.
You can contact data.protection@aerq.com in all other cases or if you have problems revoking your consent on this website.
Please note that any revocation of your consent is valid only with future effect and does not have an impact on the lawfulness of past processing of your data. In some cases we have the right despite the revocation of your consent to continue processing your personal data on another legal basis than marketing activities, such as fulfillment or audit trail of a contract.
7. Tracking tool: Matomo
We use Matomo as a tracking tool with Matomo acting as AERQ’s data processor for processing your Personal Data. This is based on acceptance of the Matomo Cloud Data Processing Agreement. Learn more here: https://matomo.org/matomo-cloud-dpa/
Learn more about the Matomo Data Processing here: https://matomo.org/gdpr-analytics/
The functions of Matomo are explained in the following paragraphs.
Cookies are used to better understand how visitors use our site and to improve the site over time. The information is anonymous and compliant to GPDR.
Matomo registers and sets two types of cookies:
The IP-address of the website visitor is anonymously tracked. Cookie-less tracking in activated on our website.
8. Google AdWords
8.1 Type and purpose of the processing
Our website uses Google Conversion Tracking. The operating company of the Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via a Google advertisement, Google Adwords will place a cookie on your computer. The conversion tracking cookie is used when a user clicks on an ad from Google.
If the user visits certain pages on our website, and the cookie has not expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Thus, cookies cannot be tracked by the websites of AdWords customers. The information gathered by the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers see the total number of users who clicked on their advertisement and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
8.2 Legal basis
Your consent is the legal basis for the integration of Google AdWords and the associated data transfer to Google (Art. 6 Para. 1 (a) GDPR).
8.3 Recipients
Whenever you visit our website, your personal information, including your IP address, is transferred to Google in the U.S. This personal information is saved by Google. Google may transfer such personal data collected through the technical process to third parties.
We do not receive information from Google that could identify the data subject.
8.4 Retention period
These cookies lose their validity after 30 days and are not used for personal identification.
8.5 Third country transfers
Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
8.6 Revocation of consent
If you do not want to participate in the tracking, you can reject the required cookie use – for example via a general browser setting that disables the automatic use of cookies or configures your browser to block cookies from the domain ‘googleleadservices.com’.
Please note that you should not delete the opt-out cookies as long as you do not want to save measurement data. If you have deleted all your cookies in the browser, you must use the respective opt-out cookie again.
8.7 Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.
9. Embedded YouTube videos
9.1 Type and purpose of the processing
We embed YouTube videos on several of our websites. The operator of the respective plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter ‘YouTube’). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheater Pkwy, Mountain View, CA 94043, USA (hereinafter ‘Google’). When you visit a page with the YouTube plug-in, a connection to YouTube’s servers will be created, which tells YouTube which pages you visit. When you are logged into your YouTube account, YouTube can associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behaviour.
You will find additional information on the purpose and scope of the data collection and its processing by YouTube in the provider’s privacy policy, as well as additional information on your rights and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
9.2 Legal basis
Your consent is the legal basis for the integration of YouTube and the associated data transfer to Google (Art. 6 Para. 1 (a GDPR).
9.3 Recipients
Visiting YouTube automatically triggers a connection to Google.
9.4 Retention period and revocation of consent
Everyone who has disabled the storage of cookies for the Google ad programme will not have to expect any cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.
You’ll find additional information on data protection at ‘YouTube’ in the provider’s privacy policy at: https://policies.google.com/privacy.
9.5 Third country transfers
Google processes your data in the United States of America and is subject to the EU-U.S. Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
9.6 Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations
