Privacy Policy

Responsible Entity

We are delighted that you have visited our website. First of all, we would like to introduce ourselves as the responsible entity in terms of data protection law:

Value for Good GmbH

represented by the management Clara Péron and Rayd Abu-Ayyash

Französische Straße 47, 10117 Berlin

Telephone: +49 (0)30 20 45 46 70

Email: mail@valueforgood.com

In order to fulfil our legal obligation, we would like to inform you about the collection and use of your personal data.

Data protection officer

We have appointed a data protection officer.

Herold Unternehmensberatung GmbH
Herr Philipp Herold
Hafenstraße 1a
23568 Lübeck
Email address: info@hub24.de

General

Your personal data is collected when you use our website. This can occur when you enter data such as your email address. However, our system also collects data from you automatically, and this includes your visit to our website. This takes place regardless of the device or software used by you to access our website.

Any input of data by you on our website is voluntary; non-disclosure of your data will not result in any disadvantages to you. However, without certain data, it is not possible for us to provide services or conclude contracts. We will always make it clear when such mandatory information is required.

On this website, the user’s personal data is only collected within the framework of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Article 4 of the GDPR.

According to the GDPR, data processing is permitted in three cases in particular:

pursuant to Article 6 (1) (a) and (7) GDPR, if you have consented to us processing your data; in each case, we will provide you in advance in this Privacy Policy and when you give your consent in accordance with Article 4 No. 11 GDPR with the specific reasons and circumstances behind processing your data;
pursuant to Article 6 (1) (b) GDPR, if the processing of your data is required to initiate, conclude or process a contractual relationship; pursuant to Article 6 (1) (f) GDPR, if, after a balancing of interests, the processing is necessary to protect our legitimate interests; this includes in particular our interests in analysing, optimising and securing the offering on our website – especially an analysis of user behaviour, the creation of profiles for advertising purposes and the storage of access data as well as the use of third-party providers.

User Data

We collect user data (e.g. name, address and email address, any services used) to the extent that it is necessary for the establishment, content design or modification of a contractual relationship between us and the user.

Usage Data

We also collect usage data (e.g. visits to the website, interest in services) to enable the user to use the services provided by our website.

We will only combine usage data if and to the extent that this is necessary for billing purposes. In all other instances, we will only create usage data anonymously and only if you have not objected to this. This objection may be forwarded at any time to the address provided in the Legal Notice or to the person responsible named in this Privacy Policy.

The legal basis for the data processing is, on the one hand, our legitimate interests pursuant to Article 6 (1) (f) GDPR in analysing the website and its use, and if necessary also the legal permission to store data in the context of initiating a contractual relationship pursuant to Article 6 (1) (b) GDPR.

Furthermore, every time you use this website, our provider saves information called server log files, which are automatically transmitted by your browser. These are:

Your IP address
the type and version of your browser
the host name
the time of visit
the page from which you visited our site
the name of the page accessed
the exact time of access and
the amount of data transferred.

This data is only used for statistical purposes and does not allow us to identify you as a user.

Advertising

Before sending you advertising, we will request your explicit consent pursuant to Article 4 No. 11 GDPR, unless it is advertising for products similar to those you have already purchased. This happens in particular if you consent to us sending you our newsletter or if you fill out a contact form.

Consent

If we request your consent to process your data, we will inform you clearly and in an easily accessible manner about the cases in which you are providing your consent. Any consent we request is voluntary; any benefit you would like to obtain by providing consent can also be obtained without consent, just ask us.

You are entitled to revoke any consent you have given us to process your personal data at any time. You can do this by sending an informal message, e.g. via our contact form, an email to the email address provided in the Legal Notice or via an unsubscribe link (if offered by us). Your revocation does not affect the legality of the data processing carried out up to that point.

Storage Period

In principle, your data will only be stored for as long as required by the purpose of the respective data processing. Further storage will be considered in particular if this is still necessary for us to pursue legal action or for our other legitimate interests or if we are legally obliged to retain your data (e.g. within the framework of tax retention periods, which are generally 6 or even 10 years).

User Rights

Information

You can request from us at any time and free of charge information about the personal data we have stored about you. To prevent misuse, your identification is required.

Deletion, Correction, Restriction

You can request at any time that we correct (also by making an addition) incorrect data, restrict its processing or delete your data. This is especially applicable if the reason for processing has expired, a required consent has been revoked and there is no other legal basis or our data processing is unlawful. We will then immediately correct, block or even delete your personal data within the legal framework.

Objection

Our text on consent applies to the right to object to receiving advertising:

You are entitled to revoke your consent to process your personal data at any time. You can do this by sending an informal message, e.g. via our contact form, an email to the email address provided in the Legal Notice or via an unsubscribe link (if offered by us). Your revocation does not affect the legality of the data processing carried out up to that point.

Data Transfer

You can request that we transfer the data stored about you in machine-readable form.

Complaint

If you feel that your rights have been infringed by our data processing, you can file a complaint with the competent supervisory authority. A list of authorities can be found here.

Amendment to the Privacy Policy

If the Privacy Policy needs to be amended for legal or practical reasons, we will update this page accordingly. This will not change the consent given by the user.

Use of the web analytics service Plausible Analytics

This website uses the privacy-friendly web analytics service Plausible Analytics for visitor statistics. The provider is Plausible Insights OÜ, Tartu, Estonia (EU). The web analysis is based purely on anonymised data and does not use cookies. It is not possible to draw conclusions about individuals. When you visit our website, the following data is stored by Plausible Analytics: URL of the page or file accessed, URL of the page from which you came to our site (referrer), URL of an outbound link that you clicked on our site (outbound link), browser type and version, your device‘s operating system and device type. Information about your location (country, region, and city) is approximated from your IP address; the IP address itself is not stored. The integration of Plausible Analytics is based on our interest in statistically analysing the use of our website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Further information on the handling of user data can be found in the privacy policy of Plausible Analytics: plausible.io/privacy and plausible.io/data-policy.

Applications via our career portal

You have the opportunity to apply for available positions via our career portal. The processing of your personal data as part of the application process is carried out for the implementation of pre-contractual measures in accordance with Art. 6 (1) lit. b GDPR and - if necessary - on the basis of our legitimate interest in efficient personnel administration and recruitment in accordance with Art. 6 (1) lit. f GDPR.
The controller for data processing is Value for Good GmbH, Französische Straße 47, 10117 Berlin, Germany.
As part of your application, we collect and process the following data in particular

Master data (e.g., name, address, contact details)
Qualification and application documents (e.g., CV, certificates, cover letter)
Other information collected as part of the application process (e.g., interview notes)
Data are transmitted in encrypted form via the application portal of our service provider Personio GmbH, Seidlstraße 3, 80335 Munich, Germany. Personio acts as a processor in accordance with Art. 28 GDPR and processes your data exclusively on our behalf and in accordance with our instructions. Further information on data protection at Personio can be found at: https://www.personio.de/datenschutzerklaerung/

Storage period:
Your application data will be deleted no later than six months after completion of the application process, provided that (1) there are no statutory retention obligations to the contrary, or (2) you have given us your express consent for longer storage (e.g., for an applicant pool).

With your consent, you may subscribe to our newsletter. We use the so-called double opt-in procedure to register for our newsletter. That means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. In addition, we save the IP address you use and the times of registration and confirmation. The procedure is aimed at proving your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information required to send the newsletter is your email address. After your confirmation, we will save your email address so that we can send you the newsletter. The legal basis for this is Article 6 (1) 1 (a) GDPR.

Your personal data will be processed on our behalf on the basis of order processing contracts pursuant to Article 28 GDPR by the service provider CleverReach of the provider CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. We ensure that personal data is processed pursuant to the General Data Processing Regulation. Further information on the provider’s data protection can be found in CleverReach’s data protection regulations at:
cleverreach.com/de/datenschutz.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter email or by sending a message to the contact details provided in the Legal Notice.

We would like to point out that we make an evaluation of your behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. For the evaluations, we link your collected data and the web beacons with your email address and an individual ID. This can be used to analyse, among other things, how many recipients have opened the newsletter message and how often which link in the newsletter has been clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. use of our contact form) has taken place after clicking on the link in the newsletter. The legal basis is Article 6 (1) 1 (a) GDPR and Section 25 (1) of the Teleservices Data Protection Act. Further information on data analysis by CleverReach newsletters can be found at:
cleverreach.com/de/funktionen/reporting-und-tracking. You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact method. The information will be stored as long as you are subscribed to the newsletter.

Social Media Links

General Information

We provide links to our social media presences. Unlike social media plugins, links do not mean that the social media platform knows about your visit when you visit our site. Like any link, however, they mean that your data will be processed by the social media platform when you click on the link. The social media platform will usually save cookies on your device or even save your usage behaviour for your account, especially if you yourself are logged in. The social media platform can use your data to analyse your user behaviour and use it for (interest-oriented) advertising. This can result in you being shown advertising within and outside the social media platform. Please be clear about whether you are willing to accept this and only use a social media platform if you have sufficiently informed yourself about the data processing there and agree to it (this applies in particular if you have not yet used it yourself) - we have included links to the Privacy Policies of the social media platforms.

Our site uses links to our presence in the social network LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.
It is just a normal link, so when you visit our site, LinkedIn does not know that you have visited our website. However, if you click on the link, you will be redirected to LinkedIn, which means that LinkedIn also knows that you have visited our site.
We have no knowledge of, and no influence over, the possible collection and use of your data by LinkedIn once you have clicked on the link. Further information can be found in LinkedIn‘s Privacy Policy at
https://www.linkedin.com/legal/privacy-policy?_l=de_DE.

Our Fan Page(s)

General Information

In addition to our website, we also use fan page(s) on social media platforms. Having already informed you above about the data processing that takes place on our website and then ensured in particular that it is not only your visit to our website that is sent to the social media platform, we would like to inform you about the data processing that occurs when you visit our social media fan page(s) in accordance with the ECJ ruling of 5 June, 2018 on social media presences:
We present ourselves and our offers on social media fan page(s) based on our legitimate interest pursuant to Article 6 (1) (f) GDPR through timely customer communication as well as for the purposes of advertising and our public relations.
You can regularly access our social media fan page(s) on the Internet regardless of whether or not you have created a user account on the relevant platform yourself. In both cases, however, your data will be processed by the social media platform.
Your IP address is recorded and saved every time you access the social media platform. Furthermore, a cookie is usually placed on your site. It stores your visit and other data about your visit on the social media platform.
If you are also logged in to the social media platform itself, your visit will also be recorded using cookies or other technical means and assigned to your user account. This enables the social media platform to regularly analyse your user behaviour. A user profile with your interests is created, which the social media platform uses to provide you with a user experience tailored to your interests, but above all to display interest-oriented advertising within and outside the social media platform - possibly even across devices. Your data may also be used for market research. For details, please refer to the following Privacy Policies of the social media platform(s) that we use.
We can also regularly use the data from the social media platform to enable you to use our fan page in a way that is in line with your interests or to address you with advertising.
If you interact with our fan page and are logged in to the relevant social media platform, we can generally also recognise your user profile and see your content in accordance with the terms of use of the social media site.
If you do not want this, please refer to the „Cookies“ section above for general handling of cookies and their deactivation. There we have generally listed how you can prevent or restrict the storage of cookies on your devices. You can find further information about the relevant social media platform below.
According to the ECJ ruling of 5 June, 2018, we are always jointly responsible for our social media fan page(s) in collaboration with the respective social media platform. This means that you can also assert your general rights, which we have detailed above under the heading „User Rights“, against us. For this purpose, we refer you to our contact details at the beginning of this Privacy Policy. Please note, however, that we have no definitive knowledge of the exact extent to which your data is processed on the social media platform and can exert even less influence with regard to it. We therefore ask you to contact the relevant social media platform immediately regarding your rights.
We generally leave your data on the social media platform and do not import it onto our servers. Should this be the case, our general information pertaining to the storage period shall apply.
For further information on the processing of your data and the storage period on the social media platform, please refer to the respective Privacy Policy of the social media platform, which we have listed below.

LinkedIn
We have a presence on the social media platform LinkedIn.
Joint Controller
LinkedIn Ireland Limited Company,
Wilton Place,
Dublin 2,
Ireland

Contact
If you visit our profile on LinkedIn, your data will be transferred to the USA. LinkedIn Corporation is certified under the EU-US Privacy Framework and is obliged to comply with EU data protection regulations.

We have no knowledge of and no influence over the possible collection and use of your data by LinkedIn. You can find more information in LinkedIn‘s privacy policy at https://www.linkedin.com/legal/privacy-policy.

LinkedIn also provides us with statistics. These are generated and made available to us without our involvement. The data includes interactions and statistical data.

You can have a significant influence in various ways on how LinkedIn processes your data when you are logged in.

LinkedIn offers various options for selecting your privacy settings in its Privacy Policy, which you can read about there.

You can deactivate the LinkedIn advertising cookie here (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out