I. Who is the responsible body (“controller” in terms of the GDPR) and how can I contact the data protection officer?
CFG Finance GmbH, Beethovenstraße 44, 41061 Mönchengladbach, Phone: 00492161-477590, Fax: 02166-4775920, infocfg-financede
You can contact our data protection officer which is JURANDO GmbH (https://www.jurando.de) under email@example.com or by postal letter to our address; in the latter case, please add: “Att. data protection officer”.
II. Which are the rights you are entitled to?
You are entitled to the following rights which you can assert against us with respect to the personal data concerning you:
- Right to information/ access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object to the processing (Art. 21 GDPR).
In addition, you have the right to lodge a complaint about us with a supervisory authority according to Art. 77 GDPR.
Where you have consented to the processing, you have the right to withdraw the consent at any time; however, the withdrawal of consent will not affect the lawfulness of processing based on the consent before its withdrawal.
III. For what purposes do we process personal data and what is the legal basis for the processing?
When you visit our website
When you visit our website for mere information purposes, i.e. when you do not register or otherwise transfer or disclose information to us, we only collect those personal data which your browser transfers to us. This includes (to be agreed with the person in charge of your website)
– IP address
– Date and time of access
– Details of the query (specific page accessed)
– Access status/HTTP status code
– Website from which the query is made (so-called “referrer”)
– Operating system and its surface
– Language and version of the browser software.
We also store this data including the IP address as log files. We require this data for technical reasons to be able to display our website, ensure stability and security and optimize our presentation.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the afore-mentioned purposes.
We erase this data after seven days at the latest. We will only store data beyond that time after the personal data has been erased or anonymized. In the case of IP addresses, anonymization can be procured by appropriate shortening of the IP address.
We use transient and persistent cookies on our website. Transient cookies are deleted automatically when you close the browser. These comprise in particular session cookies. They store a so-called session ID which enables several queries from your browser to be allocated to one and the same session. This enables us to recognize your computer when you visit our website again. The session cookies are deleted when you log out from our website or close the browser. Persistent cookies are deleted automatically after expiry of a pre-defined validity which can vary, depending on the cookie used from time to time. You can delete the cookies at any time in the security settings of your browser.
You can set your browser as you wish, and you may, for instance, refuse to accept third-party cookies or even all cookies. However, please be aware that, if you do so, you might be unable to use all features and functions of this website.
When you contact us via the email addresses we have indicated for such purpose, we will store the personal data you have transferred to us in order to answer your requests. The information you have provided to us might be stored in a Customer Relationship Management System ("CRM system") or similar software.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above. Where the email by which you contact us is aimed at contract conclusion or when you send us an email in the context of an existing contractual relationship, the legal basis is Art. 6 subs. 1 b) GDPR.
The data is deleted after the request has been finally settled unless we are required by law to retain the data or we need the data for contract performance. You can also at any time object to the processing when the processing is based on a legitimate interest.
Google Web Fonts
This website uses so-called Web Fonts provided by Google to ensure uniform display of various fonts. When you access a page, your browser loads the required web fonts to your browser cache to correctly display texts and fonts. For such purpose, the browser you use establishes a connection to the Google servers. Google thereby becomes aware that our website was accessed from your IP address. We use Google Web Fonts to ensure uniform and appealing presentation of our online offers. This constitutes a legitimate interest in terms Art. 6 subs. 1 f) GDPR which is the appropriate legal basis. If your browser does not support Web Fonts, your computer uses a standard font. Further information on Google Web Fonts is available at developers.googl
When you transfer your application to us, we will process the transferred data to perform our (pre-) contractual duties in the context of the application procedure. If your application is successful, we further process the data for the purpose of handling and executing the employment relationship.
The legal basis is Art. 6 subs. 1 b) GDPR as well as § 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). If you voluntarily transfer to us special categories of personal data such as health data or religion, also Art. 9 subs. 2 b) GDPR serves as legal basis.
If your application is not successful, we will delete your data after six months at the latest.
Until that time, the data is stored to answer any possible queries relating to the application procedure and to comply with our documentation duties under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG). If you withdraw your application, we will delete your data immediately.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
If SSL or TLS encryption is enabled, your data cannot be read by third parties.