Privacy Policy

This translation is provided for convenience. The German version is legally binding.

Data protection is important to us. Below we inform you about the processing of your personal data when you use our website.

Controller

The name and contact details of the controller are: GroveOne GmbH, De-Saint-Exupéry-Straße 10, 60549 Frankfurt am Main, Germany.

Storage period

As a general rule, we delete your personal data when it is no longer necessary for the purposes for which it was processed and for statutory purposes. This does not apply where statutory retention obligations such as Section 257 of the German Commercial Code (HGB) stand in the way.

If we asked for your consent and you gave it, we delete your personal data when you withdraw your consent and there is no other legal basis for the processing.

We delete your personal data if you object to the processing under Art. 21 GDPR and there are no overriding legitimate grounds for the processing, or if you object to processing for direct marketing purposes or to profiling related to such direct marketing. If deletion is not possible because the processing is still necessary to comply with a legal obligation to which we are subject (statutory retention periods etc.) or for the establishment, exercise or defence of legal claims, we restrict the processing of your personal data.

You will find further information on storage periods in the sections below.

Your rights

You have the following rights against us with regard to your personal data:

Right of access,
Right to rectification,
Right to erasure,
Right to restriction of processing,
Right to object to processing and
Right to data portability.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data that is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions. We will then no longer process your personal data unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw a consent to the processing of your personal data at any time, if you have given us such consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with a supervisory authority about our processing of your personal data. The competent supervisory authority in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Wiesbaden.

Provision of your personal data

The provision of your personal data is generally neither required by law or by contract nor necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. Should this nevertheless be the case in an individual instance, we will point it out separately when we collect your personal data (for example by marking mandatory fields in input forms).

Failure to provide your personal data usually means that we cannot process it for one of the purposes described below and that you cannot make use of an offer connected with the respective processing (example: without providing your email address, you will not receive an email newsletter).

Log files

We process your personal data in order to display our online offering to you and to ensure the stability and security of our online offering. In doing so, information (for example the requested element, the URL accessed, operating system, date and time of the request, browser type and version, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference from Greenwich Mean Time (GMT) and/or HTTP status code) is stored in log files.

The data generated during use is passed on to the hosting company we have engaged, which provides our web content for us.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the proper display of our online offering and ensuring its stability and security.

Contact

If you contact us, we process your personal data in order to handle your enquiry.

If we asked for your consent and you gave it, the legal basis for this processing is Article 6(1)(a) GDPR. If we did not ask for your consent, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is handling your enquiry. If the processing is necessary for the performance of a contract with you or for taking steps prior to entering into a contract at your request, the legal basis for the processing is also Article 6(1)(b) GDPR.

Cookies and similar technologies

Cookies are used. Cookies are text information stored on your end device. A distinction is made between session cookies, which are deleted immediately when you close your browser, and persistent cookies, which are deleted only after a certain period.

Cookies serve to enable the use of certain functions. Cookies can also be used to tailor our online offering to your needs and thereby to optimise it.

If we did not ask for your consent, the legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest is the management of the languages used.

You can prevent cookies from being stored by adjusting your browser settings accordingly. Below we provide links for typical browsers where you can find further information on managing cookie settings:

You will find further opt-out options at the following links:

If you prevent cookies from being stored, this may impair the proper functioning of our online offering. If you delete all cookies, the settings mentioned above are lost and must be made again.

If we asked for your consent and you gave it, or if other legal requirements are met, we may process your email address to carry out email marketing and, where applicable, further personal data in order to address you personally.

The legal basis for this processing is Article 6(1)(a) GDPR. The content of the email marketing is described when your consent is obtained. Otherwise, the email marketing contains information about us and our goods and services. Marketing messages may also be sent on the legal basis of Article 6(1)(f) GDPR.

We use the so-called double opt-in procedure to prevent possible misuse of your personal data. After collecting your email address, we send an email to the address you provided asking you to confirm that you actually want the email marketing. The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest is carrying out the email marketing in compliance with the law.

We log the time at which you gave your consent, the time of your confirmation and the content of your declaration of consent in order to be able to prove that your consent was obtained lawfully. The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest is carrying out the email marketing in compliance with the law.

You can withdraw a consent you have given at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, you can use the link provided for this purpose in the emails or contact us using the contact details given above.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/blocking list in order to ensure in future that no further email marketing is sent in connection with this personal data. The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest is avoiding unwanted email marketing.

Analytics and marketing

We process your personal data in order to measure the reach of our online offering, to tailor it to needs and interests, and thereby to optimise our online offering and our marketing.

Social media presences

We maintain social media presences on external services in order to communicate with users there and thereby to optimise our online offering and our marketing.

https://de.linkedin.com/company/groveone

The use of the external services may also involve profiling (for advertising, personalised information etc.). Profiling may also take place across services and devices. You will find further information on the services used, the scope of the data processing and the technologies and procedures used by each service, on whether profiling takes place when the respective services are used and, where applicable, information about the logic involved and the significance and envisaged consequences of such processing for you, in the further information on the services we use at the end of this section and at the links provided there.

Provider LinkedIn: If you are located in the EU, the European Economic Area (EEA) or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA) or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Information & privacy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Safeguard: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses at https://www.linkedin.com/help/linkedin/ask/ppq.

Applications

If you apply to us, we process your personal data in order to carry out the application procedure and to decide on establishing an employment relationship. After the application procedure has ended, we restrict the processing of your personal data and delete or destroy it no later than six months after you have received the rejection, or return the application documents to you and delete or destroy any copies, unless you have consented to our continuing to use your personal data.

If we asked for your consent and you gave it, the legal basis for the processing is Article 6(1)(a) GDPR. If we did not ask for your consent, the legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest is the proper conduct of the application procedure and, where applicable, the defence against claims arising from the rejection of an application. If the processing is necessary to decide on establishing an employment relationship, the legal basis for the processing is also Section 26(1) sentence 1 of the German Federal Data Protection Act (BDSG).