Third party services

Google Ads and conversion tracking

We use the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking. Google conversion tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies lose their validity after 30 days. If you visit certain web pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Ads customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for us. This tells us the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

The legal basis for the processing is your consent pursuant to Section 25 (1) TTDSG in conjunction with. Art. 6 para. 1 lit. a) DSGVO.

The data collected through the use of conversion tracking may also be transmitted to so-called unsafe third countries, in particular to the USA. For these cases, we have concluded an order processing agreement with Google Limited, including standard contractual clauses, in order to legitimize the data transfer pursuant to Art. 46 (2) lit. c) DSGVO.

Further information as well as Google’s privacy policy can be found at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/

Requests by e-mail, telephone or fax

You have the option of contacting us via the e-mail addresses, telephone and fax numbers provided on our website. If you contact us in this way, all resulting personal data will be stored by us for the purpose of processing your request and used to contact you. Your information may be stored in our customer relationship management system (“CRM system”). In this context, the data will not be passed on to third parties. The data will be used exclusively for processing your inquiry.

The legal basis for the processing of the data is Art. 6 para. 1 lit. f) DSGVO (legitimate interests). The data processing serves to protect the legitimate interest for the effective processing of the inquiries directed to us as well as the processing of business relations with our B2B partners.

The data you provide us with will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request)…. Mandatory legal provisions – in particular legal storage obligations – remain unaffected.

You can object to the processing of your data by sending an e-mail to datenschutzbeauftragter@bancos.com. In such a case, communication with you cannot be continued. All personal data stored in the course of contacting you will be deleted in this case, provided that there are no legal retention obligations to the contrary.

Meetings and project work with MS Teams

Online meetings, video conferences and location-independent project work (“digital meetings”) with customers, partners and other external persons are conducted at G&H Bankensoftware AG (“G&H”) using the tool “Microsoft Teams”. Microsoft Teams is a service of Microsoft Ireland Operations Limited:

Microsoft’s privacy policy can be found here.

When using Microsoft Teams, various types of data are processed. The scope of the data also depends on the data you provide before or during participation in a digital meeting. The following personal data is subject to processing:

• User details: e.g. display name, email address, profile picture.
• Meeting metadata: e.g., date, time, meeting ID, phone numbers, location.
• Text, audio and video data: you may have the option of using the chat function in a digital meeting. To this extent, the text entries you make are processed in order to display them in the digital meeting. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the meeting. You can turn off or mute the camera or microphone yourself at any time via the Microsoft Teams applications.
• As part of project work, it is possible to share project content in various file formats (e.g. Word, PDF) and make it visible to all members of the respective team.
• There is generally no recording of digital meetings. If we want to record online meetings, we will transparently communicate this to you in advance and ask for your consent. The fact of recording will also be displayed to you in the Teams app or in the web browser view.

Which data is processed by Microsoft Teams in detail for which purpose and with which storage period can be found here.

If the collected data has a personal reference, the processing is based on legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO). Our legitimate interest here is to maintain location-independent communication. Furthermore, the legal basis for data processing when conducting digital meetings is Art. 6 (1) p. 1 lit. b) DSGVO, insofar as the meetings are conducted in the context of contractual relationships with end customers.

The Microsoft Teams provider (and its subcontracted processors) necessarily obtains knowledge of the aforementioned data insofar as this is provided for under our order processing agreement with Microsoft Teams. Here at Microsoft, you can learn more about the provider’s handling of the data. Personal data processed in connection with participation in digital meetings will not be disclosed by us to third parties unless it is intended for disclosure.

As a matter of principle, data processing takes place within the EU. However, we cannot rule out the possibility that personal data may be transferred to the USA and processed there by Microsoft.

In the event that data transfers do occur, we have concluded an order processing agreement with Microsoft Ireland Operations Limited based in Ireland in accordance with Art. 28 DSGVO. In the event that Microsoft Ireland Operations Limited forwards the data received to further service providers based in unsafe third countries (esp. Microsoft Corporation based in the USA), Microsoft Ireland Operations Limited concludes the necessary standard contractual clauses pursuant to Art. 46 para. 2 lit. c) DSGVO with these service providers. These contracts are then considered an appropriate guarantee and thus the legal basis for the data transfer.”

Your data will be processed during the execution of the digital meeting…. The deletion of some data already takes place after the end of the meeting. Details of the user, meeting metadata and content such as meetings, chats, shared files are deleted by Microsoft after 30 days. Any legal retention obligations remain unaffected.

You can object to the processing of your data by sending an e-mail to datenschutzbeauftragter@bancos.com. In such a case, communication with you cannot be continued. All personal data stored in the course of contacting you will be deleted in this case, provided that there are no legal retention obligations to the contrary.

Information for applicants

Here we inform you about how we process your personal data when you apply for a position advertised by us or on your own initiative. You provide us with your personal data voluntarily as part of the application process. However, the provision of personal data is necessary for the processing of your application or the conclusion of a contract for employment with us. This means that if you do not provide us with personal data when applying, we cannot enter into an employment relationship with you.

We process all data that you provide to us through your application, e.g. contact data, cover letter, resume, references. In addition, we also process all other data related to your application (e.g. correspondence or notes in the context of job interviews). If you provide us with them, we may also process special categories of personal data (e.g. health data). We may also obtain the above data about you from other sources. This may be the case if we involve temporary employment agencies, recruitment agencies or employment agencies in the application process. You have provided your data there yourself. If applicable, we also obtain data from professional networks (e.g. XING, LinkedIn), provided you have made them public there.

We process your personal data in order to be able to carry out the selection process. The data you provide will be processed for the purpose of processing your application and, if an employment relationship is established, also for the purpose of implementing the employment relationship. For this purpose, your data will be processed internally by the HR department and, if necessary, transmitted to involved persons (e.g. department heads). For the administration of applications and personnel data we use the software “Personio” of Personio GmbH & Co. KG. Personio potentially has access to the data processed in the system and therefore acts as an order processor for us and is thus subject to our instructions. A corresponding contract for order processing has been concluded.

The legal basis for this is Art. 88 DSGVO in conjunction with. § Section 26 (1) BDSG and, in the event that special categories of personal data are processed, Section 22 (1) b BDSG. Furthermore, we may process personal data about you insofar as this is necessary to defend asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 lit. f) DSGVO (legitimate interest). The legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

We store your personal data for as long as this is necessary for the decision on your application. If an employment relationship between you and us is not established, your data will be deleted after six months following the end of the application process. If you assert legal claims against us, the data will be retained for the purpose of providing evidence beyond the six months until the matter has been concluded.

If no employment relationship is established, but you have given us permission to continue storing your data (“applicant pool”), we will store your data until you revoke your permission, but for no longer than 12 months.

If an employment relationship is established between you and us, we may further process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG.