In the following, we would like to inform you about the processing of personal data in line with the usage of our internet pages Under Article 4 of the General Data Protection Regulation (GDPR), ‘personal data’ means all information relating to an identified or identifiable natural person (‘data subject’) which can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The legal basis of data protection can be found in the new Federal Data Protection Act (BDSG) and in the GDPR.

Responsible

The responsible for these websites is Changepoint Advisory GmbH (Jungfernstieg 7, 20354 Hamburg, Germany). Further information about the company and the persons authorised to represent it can be found in our imprint of our website: https://procuretechs.changepoint.de/imprint/.

Legal basis of data processing

In order to be able to offer you our website and associated services, we process personal data on the basis of the following legal grounds:

• consent to the processing of his or her personal data (Article 6 (1) (a) GDPR))
• for the performance of contracts (Art. 6 sec. 1 lit. b) GDPR)
• for the purposes of legitimate interests (Article 6 (1) (f) GDPR)
• for necessary compliance with a legal obligation (Art. 6 (1) (c) GDPR)

We will refer to the respective terminology in connection with the respective processing, so that you can classify the basis on which we process personal data.

If your personal information is processed on the grounds of your consent, you have the right to withdraw your consent to us at any time with future effect.

If we process data on the basis of legitimate interests, you, as the person concerned, have the right to object to the processing of your personal data, taking into account the requirements of Art. 21 GDPR.

Purpose of processing personal data

We process the data mentioned here for the operation of our website and for the fulfilment of contractual obligations towards our customers or for the protection of our legitimate interests. For inquiries outside an active customer relationship, we process the data for sales and advertising purposes. You may object to the use of your personal information for promotional purposes at any time.

What data is being processed?

Access data

When you visit our website, personal data is processed in order to be able to display the contents of the website on your device.

In order for the pages to be displayed in your browser, the IP address of the
device used will be processed. In addition, you will find further information about the browser of your
device. The data will also be used to identify errors on the websites and to
to be able to fix it.

We are obliged under data protection law, including the confidentiality and integrity of the
IT systems regarding the process of personal data.

For this purpose and for this interest, following
data will be logged:

• Anonymized IP- address of the accessing computer (for a maximum of 5 days)
• Operating system of the accessing computer
• Browser version used
• Name of the file retrieved
• Date and time of access to the internet site
• Volume of data transferred
• Referring URL

The anonymised IP address will be displayed after
five days of all systems connected to the operation of the
used on these websites.

The data is therefore used to detect and correct errors on the internet pages.

Contact

We offer a contact form on our website, which will provide you with information on our
products or services or to make contact in general. The ones you
we have required data to answer a request as a mandatory
Marked. Information placed in additional data fields is voluntary.

We need this information in order to process your request, to contact you correctly and to provide you with a
answer. The data processing is carried out in the case of specific requests for the fulfilment of a
contract or the initiation of the contract. In the case of general enquiries, processing is carried out on the basis of
a balance of interests.

Enquiries received via the contact form of our website will be sent to us electronically
to answer your request. In this context, other persons may also receive
departments and, where applicable, third parties are aware of the form content you have sent.

The transmission of the data form is done safely via encrypted internet connections.
The processing of the data is carried out in accordance with Art. 1 lit. f) GDPR based on our legitimate interest in answering your enquiries. We delete the data as soon as the request is completed.

Registration function

If you wish to register as a supplier or customer on our platform, data will be processed in the course of this registration.

This data is: salutation, title, position, first name, last name, company, company form, sales tax ID, commercial register Number, authorized representative, position, industry affiliation, e-mail.

We process this data for the purpose of:
Mysupply: Mediation of suppliers and buyers of procurement contracts, mediation of contacts
Expertist: Mediation of providers and buyers of project orders, mediation of contacts
German Solar: Operation of a sales shop
Espresso Society: Operation of a sales shop

The processing of the data is carried out in accordance with Art. 1 lit. b) GDPR on the basis of a contract or a contract initiation. The storage period of the data depends on the legal retention periods in accordance with the HGB or AO.

Mit Ihrer Registrierung auf unserer Seite werden wir zudem das Datum sowie die Uhrzeit Ihrer Registrierung speichern. Dies dient in dem Fall, dass ein Dritter Ihre Daten missbraucht und sich mit diesen Daten ohne Ihr Wissen auf unserer Seite registriert, als Absicherung unsererseits. Eine Weitergabe Ihrer Daten an Dritte erfolgt nur nach Zustimmung und/oder im Falle einer Teilnahme am Verhandlungsprozess. Ein Abgleich der so erhobenen Daten mit Daten, die möglicherweise durch andere Komponenten unserer Seite erhoben werden, erfolgt nicht.

Voluntary information

If you voluntarily provide data to us using our forms and these are not required for the performance of our contract, we process the data in the legitimate assumption that the processing and use of this data is in your interest.

Recipients / Disclosure of Data

However, data that you provide to us will not be passed on to external third parties only after consent. In particular, your data will not be disclosed to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or for other products or services. It may occur that a service provider receives knowledge of personal data. We carefully select our service providers – in particular with regard to data protection and data security – and take all necessary data protection measures for permissible data processing.

Where is the data processed?

The data will be processed exclusively in data centers in the Federal Republic of Germany.
If personal data is processed outside the European Union you will be able to recognize this from previous explanations.

Privacy notices for applicants

The following data will be collected in connection with your application in our company:

Data collection of applicants

We process personal data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions) and to carry out the application process. The processing of the applicant data is carried out on the basis of Section 26 of the German Data Code (BDSG).

Period of data storage

Data of candidates applying for internal posts will be deleted in the event of a cancellation after the expiry of six months, provided that no other legitimate interests of the controller conflict with deletion.
If you have received a commitment for a job as part of the application process, the data will be transferred to our personnel information system.
Data of applicants applying for project-related positions will remain stored in our pool of applicants for the entire duration of the placement, as is necessary in compliance with the statutory retention periods for the respective task performance.
Furthermore, your data will be deleted after two years, unless you have given us consent for further storage.

Disclosure

A specially developed software solution is used for the application process. The applicant data will be screened by the HR department upon receipt of the application. Appropriate applications are forwarded internally to the department managers for the respective open position. Then the further procedure is agreed. In the company, only those persons who need this for the proper conduct of our application process have access to your data.
We only collect, store and process your transmitted personal data to the extent necessary for the processing of enquiries or the processing of orders and you have previously consented. You have the right to revoke your consent with effect for the future at any time.
In order to best support you in your application efforts, we share your personal data with our affiliates in order to verify matching to other projects. In addition, their data will not be passed on to third parties without agreement. The data will only be passed on to third parties beyond consent if we are obliged to do so by compelling legal regulations or if you determine this yourself.

Security

We are using all necessary technical and organizational security measures to protect your personal data from loss and misuse. Your data is saved in a secure operating environment that is inaccessible to the public. Furthermore, data is encrypted during the transfer by so-called Transport Layers Security (TLS). This means that an approved encryption procedure is used for communication between your computer and our servers.

Existence of automated decision-making

As a responsible company we refrain from automatic decision-making or profiling.

Data protection supervisor

We are not obliged to designate a data protection officer. You can send questions about data protection to datenschutzbeauftragter@procuretechs.changepoint.de by e-mail. The use of this email address for other purposes is explicitly prohibited.

Your rights as a person concerned

You have the right to be informed about your personal data. You can contact us for information at any time. In the cases of a request for information that is not carried out in written form, we kindly ask you to understand that we need a proof that you are the person who you claim to be. Furthermore, you have the right to rectification, erasure or restriction of processing to the extent permitted by law.
In addition, you have a right to object to the processing within the scope of the legal requirements. The same applies to a right to data portability. In particular, if you wish to exercise a right of objection to the processing of your data on the basis of a balance of interests, you must expect that we will subject this to a thorough examination. We have carefully weighed up our interests here. So please read Article 21 GDPR carefully and expect that we will also ask questions about the “special situation” in article 21 sec.1 GDPR.
Finally, you also have a right to data portability. Here, too, this is only granted within the scope of the legal requirements.

Deletion of data

In principle, we delete personal data when there is no need for further storage. . However, it can be necessary to store data in order to fulfill contractual obligations to examine warranty and guarantee claims. In addition, it is indispensable to store data to grant or defend the mentioned claims. In order to comply with the statutory retention period, a deletion shall only be carried out after expiration of the respective retention period.

Right to complain to a supervisory authority

You have the right to to lodge a complaint with a supervisory authority regarding the processing of your personal data. The competent supervisory authority depends on the federal state of your residence, your work or the suspected infringement. .

Cookies

We use cookies on our websites. By using cookies, it is possible to optimize the website in the interests of the user and to provide user-friendly services. Cookies are small text files that are stored on your computer system. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit. When cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie.
In some cases, the cookies are used to simplify the visit to the website by storing settings. If individual cookies implemented by us also process personal data, the processing will be carried out in accordance with Art. 1 lit. b GDPR either for the implementation of the contract or in accordance with Article 6(3) 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit. In the case of cookies that are not necessary, but for the purpose of marketing measures and their tracking, cookies are used on the basis of consent. Art. 6 Abs. 1 lit a GDPR. This means that you must give your consent to the processing and use of these cookies in advance. For this purpose, we use a so-called Consent Management Tool (often called “Cookie Banner”) through which you have the possibility to change your decision.

The following cookies are used by us: