Privacy

ALLPLAN GmbH appreciates your visit to our careers page and your interest in our company. We take the protection of your private data very seriously and want you to feel comfortable when visiting our website. The protection of your privacy when processing personal data is an important concern for us, which we consider in our business processes. We process data that is collected when you visit our site in accordance with the GDPR. If there are any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer.

 

1. Responsible for data processing

Jointly responsible pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) are
 
ALLPLAN GmbH                               
Konrad-Zuse-Platz 1                                    
81829 Munich                                            
Germany                                                  
E-mail: info@allplan.com                              
 
and the affiliated companies listed below:
 

• ALLPLAN Deutschland GmbH
• ALLPLAN Österreich GmbH
• ALLPLAN Software Engineering GmbH
• Design Data Corp. d/b/a ALLPLAN
• ALLPLAN Software Singapore Pte. Ltd.
• ALLPLAN France S.a.r.l.
• ALLPLAN Italia S.r.l.
• ALLPLAN Schweiz AG
• ALLPLAN SYSTEMS ESPAÑA, S.A.
• ALLPLAN Česko s.r.o.
• ALLPLAN Slovensko s.r.o.
• ALLPLAN UK Ltd.

In the course of business, it is essential that data is also regularly exchanged between ALLPLAN's subsidiaries and business operations in order to promote intra-group cooperation and use resources effectively. For this reason, central processes are not limited to the area of a single group company, but also extend to other group companies and benefit from the processes established and resources available there. The ALLPLAN companies therefore cooperate in many areas and act in the data protection sense as so-called jointly responsible parties for this website as indicated above.

Information on the essential content of the contract due to joint responsibility:
In order to ensure the security of processing and the effective assertion of your rights, and against the above background, the member companies have concluded a contract as joint controllers within the meaning of Art. 26 in conjunction with Art. 4 No. 7 GDPR. This contract regulates the following points in particular:
Object, purpose, means and scope as well as the competences and responsibilities regarding data processing.
Information of the data subjects
Fulfilment of the other rights of the data subjects
Security of processing
Involvement of data processors
Procedure in the event of a data protection breach
Other joint and reciprocal obligations
Cooperation with supervisory authorities
Liability
 

2. Contact option of the data protection officer
 

You can reach our data protection officer at datenschutzbeauftragter@allplan.com or our postal address with the addition of "the data protection officer".

3. Providing the website

During the mere informational use of the website, i.e. if you do not register or otherwise transmit information to us (e.g. via a contact form), we collect the following technical information (log file data):
Operating system of the end device with which you visit our website.
browser (type, version & language settings)
the amount of data retrieved
the current IP address of the end device with which you visit our website
date and time of access
the URL of the previously visited website (referrer)
the URL of the (sub)page you are accessing on the website
the Internet service provider of the accessing system
The collection of this data is technically necessary to display our website to you and to ensure stability and security. We (and our service provider) do not regularly know who is behind an IP address. We do not combine the data listed above with other data.
 
The legal basis for the storage of the data/log files is Art. 6 para. 1 p. 1 lit. f GDPR.
The storage in log files ensures the proper functioning of the website and serves to improve and secure our systems. Any further evaluation of this data (for example for marketing purposes) does not take place in this context. The data stored by ALLPLAN GmbH is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case after six weeks at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

4. Application procedure

For applications, we use the services of our partner, rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg. rexx systems processes the application data on behalf of ALLPLAN GmbH. Of course, we will use your data exclusively for processing your application. Your personal data will be processed during the application process; this may vary depending on the vacancy. The legal basis for the processing of your personal data within the scope of the application procedure is Section 26 BDSG and Article 6 (1) sentence 1 lit. a, b and f GDPR. If no contract is concluded, your personal data will be deleted 6 months after completion of the application process, unless you have given us your express consent to store your data for a longer period.

5. Cookies

This website uses so-called "cookies", which are used to make the website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer system. We would like to point out that some of these cookies are transferred from our server to your computer system, whereby these are usually so-called "session cookies". "Session cookies" are characterised by the fact that they are automatically deleted from your hard drive at the end of the browser session. Other cookies remain on your computer system and enable us to recognise your computer system on your next visit (so-called permanent cookies). When the website is called up, the user is informed about the use of cookies and his or her consent to the processing of the personal data used is obtained. No personal data is stored in the cookies used. We only receive anonymised information on the basis of the cookies. Of course, you can reject cookies at any time, provided your browser allows this. Please note that certain functions of this website may not be able to be used, or only to a limited extent, if your browser is set to not accept cookies (from our website).
The legal basis for possible processing of personal data by means of cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art.6 para.1 p.1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art.6 para.1 p.1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.
Technically necessary cookies serve to simplify the use of websites. The user data collected through technically necessary cookies are not used to create user profiles. Analysis cookies are used to improve the quality of the websites and their content. Through the analysis cookies, we learn how the website is used and can constantly optimise our offer.
Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
Once you have given your consent, you can revoke it at any time with future effect by calling up the cookie administration via the icon (cookie) in the bottom right-hand corner of each page and unchecking the box next to the processing to which you had consented.

5.1 Matomo

On this website, data is collected and stored for marketing and optimisation purposes using the web analytics service software Matomo (www.matomo.org). From this data, user profiles are created under a pseudonym; cookies are used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's internet browser. The cookies enable the recognition of the internet browser. The data collected using Matomo technology (including your anonymised IP address) is transmitted to our server and stored for usage analysis purposes, which serves to optimise the website on our part. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.
The legal basis for the processing of the users' personal data is Art. 6 para. 1 p. 1 lit. a. GDPR.
The processing of the users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we can compile information on the use of the individual components of the website. This helps us to continuously improve the website and its user-friendliness. The collection and storage of data only takes place with your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.
We store the analysis data only if the purpose of the data processing requires, but for a maximum of 14 months. Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent. You can find more information on the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/.

6. Participation "JobAlert“

You can register to participate in "JobAlert", where you will be automatically notified by e-mail as soon as a new job offer matching your search specifications appears. Personal data is collected and processed solely for the purpose of contacting you and sending you job vacancies. Data is not passed on outside ALLPLAN and the order processor rexx systems GmbH. This data is stored until a final status is reached (recruitment or rejection) or until you unsubscribe from JobAlert.

7. Contact form and E-mail

We provide you with a contact form on our website for easy contacting. The data entered in the input mask is transmitted to ALLPLAN GmbH and stored. In addition, the user's IP address, as well as the date and time of transmission, are saved at the time of sending. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. The data will not be passed on to third parties. The data is used exclusively for processing the enquiry.
The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. p. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR.
The processing of the personal data is solely for the purpose of processing the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

8. Transfer of Personal Data/Recipients

As a matter of principle, your personal data will not be passed on to third parties unless we are legally obliged to do so, or the passing on of data is necessary for the performance of the contractual relationship, or you have previously expressly consented to the passing on of your data.
Your data will only be passed on to affiliated companies and service partners if they are acting on our behalf and are supporting ALLPLAN GmbH in the provision of its services. Processing of your personal data by commissioned service providers takes place within the framework of commissioned processing pursuant to Art. 28 GDPR. The aforementioned service providers only receive access to such personal information as is necessary for the performance of the respective activity. These service providers are prohibited from disclosing your personal information or using it for other purposes, for their own promotional purposes. Insofar as external service providers come into contact with your personal information, we have ensured through legal, technical and organisational measures as well as through regular checks that they also comply with the applicable data protection regulations.

9. Information on Data Subject Rights

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply.
 
a) Information on the Right to Complain
Notwithstanding these rights and the possibility of asserting any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data relating to you infringes data protection regulations (Art. 77 GDPR).
b) Information on the obligation to provide personal data
There is no obligation to provide your personal data. The provision of your personal data is voluntary and, in particular, has no effect on your application procedure.
 
c) Information on Automated Decision-Making and Profiling
No automated decision-making, in particular no automated decision-making on your application or profiling, takes place.
 
d) Instructions on Revocation in the Event of Consent
Pursuant to Art. 21 (2) GDPR, you have the right to object to the processing of personal data relating to you at any time. In the event of your objection to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes. Please note that the objection only takes effect for the future. Processing that took place prior to the objection is not affected.
 
e) Right in case of Data Processing for Direct Marketing Purposes
Pursuant to Art. 21 (2) GDPR, you have the right to object at any time to the processing of personal data relating to you. In the event of your objection to processing for the purposes of direct marketing, we will no longer process your personal data for these purposes. Please note that the objection only takes effect for the future. Processing that took place before the objection is not affected.
 
f) Reference to the Right to Object in the Event of a Weighing of Interests
Insofar as we base the processing of your personal data on a balance of interests, you may object to the processing in accordance with Art. 21 (1) GDPR. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have described. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or explain to you our compelling reasons worthy of protection.
 

10. International Data Transfers

If we transfer your personal data to a recipient that is not based in the European Economic Area, we will ensure that your data is adequately protected in accordance with the GDPR. In this regard, we take the following measures where required by law:
To subsidiaries in such countries, we therefore only disclose your personal data if they have implemented our corporate policy on the protection of personal data.
Personal data will only be transferred to external recipients in such countries if they have (i) entered EU Standard Contractual Clauses with us or (ii) implemented Binding Corporate Rules.

11. Data Security

We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

12. Changes to the Privacy Notice

We reserve the right to change or adapt this data protection declaration at any time in compliance with the applicable data protection regulations.
 
 
As of 14.11.2022