Procuretechs Network
Privacy notice

WE ARE THE FUTURE OF PROCUREMENT

Privacy notices

In the following, we would like to inform you about the processing of personal data in line with the usage of our internet pages Under Article 4 of the General Data Protection Regulation (GDPR), ‘personal data’ means all information relating to an identified or identifiable natural person (‘data subject’) which can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The legal basis of data protection can be found in the new Federal Data Protection Act (BDSG) and in the GDPR.

Responsible

The responsible for these websites is Changepoint Advisory GmbH (Jungfernstieg 7, 20354 Hamburg, Germany). Further information about the company and the persons authorised to represent it can be found in our imprint of our website: https://procuretechs.changepoint.de/imprint/.

Legal basis of data processing

In order to be able to offer you our website and associated services, we process personal data on the basis of the following legal grounds:

  • consent to the processing of his or her personal data (Article 6 (1) (a) GDPR))
  • for the performance of contracts (Art. 6 sec. 1 lit. b) GDPR)
  • for the purposes of legitimate interests (Article 6 (1) (f) GDPR)
  • for necessary compliance with a legal obligation (Art. 6 (1) (c) GDPR)

We will refer to the respective terminology in connection with the respective processing, so that you can classify the basis on which we process personal data.

If your personal information is processed on the grounds of your consent, you have the right to withdraw your consent to us at any time with future effect.

If we process data on the basis of legitimate interests, you, as the person concerned, have the right to object to the processing of your personal data, taking into account the requirements of Art. 21 GDPR.

Purpose of processing personal data

We process the data mentioned here for the operation of our website and for the fulfilment of contractual obligations towards our customers or for the protection of our legitimate interests. For inquiries outside an active customer relationship, we process the data for sales and advertising purposes. You may object to the use of your personal information for promotional purposes at any time.

What data is being processed?

Access data

When you visit our website, personal data is processed in order to be able to display the contents of the website on your device.

In order for the pages to be displayed in your browser, the IP address of the
device used will be processed. In addition, you will find further information about the browser of your
device. The data will also be used to identify errors on the websites and to
to be able to fix it.

We are obliged under data protection law, including the confidentiality and integrity of the
IT systems regarding the process of personal data.

For this purpose and for this interest, following
data will be logged:

  • Anonymized IP- address of the accessing computer (for a maximum of 5 days)
  • Operating system of the accessing computer
  • Browser version used
  • Name of the file retrieved
  • Date and time of access to the internet site
  • Volume of data transferred
  • Referring URL

The anonymised IP address will be displayed after
five days of all systems connected to the operation of the
used on these websites.

The data is therefore used to detect and correct errors on the internet pages.

Contact

We offer a contact form on our website, which will provide you with information on our
products or services or to make contact in general. The ones you
we have required data to answer a request as a mandatory
Marked. Information placed in additional data fields is voluntary.

We need this information in order to process your request, to contact you correctly and to provide you with a
answer. The data processing is carried out in the case of specific requests for the fulfilment of a
contract or the initiation of the contract. In the case of general enquiries, processing is carried out on the basis of
a balance of interests.

Enquiries received via the contact form of our website will be sent to us electronically
to answer your request. In this context, other persons may also receive
departments and, where applicable, third parties are aware of the form content you have sent.

The transmission of the data form is done safely via encrypted internet connections.
The processing of the data is carried out in accordance with Art. 1 lit. f) GDPR based on our legitimate interest in answering your enquiries. We delete the data as soon as the request is completed.

Registration function

If you wish to register as a supplier or customer on our platform, data will be processed in the course of this registration.

This data is: salutation, title, position, first name, last name, company, company form, sales tax ID, commercial register Number, authorized representative, position, industry affiliation, e-mail.

We process this data for the purpose of:
Mysupply: Mediation of suppliers and buyers of procurement contracts, mediation of contacts
Expertist: Mediation of providers and buyers of project orders, mediation of contacts
German Solar: Operation of a sales shop
Espresso Society: Operation of a sales shop

The processing of the data is carried out in accordance with Art. 1 lit. b) GDPR on the basis of a contract or a contract initiation. The storage period of the data depends on the legal retention periods in accordance with the HGB or AO.

Mit Ihrer Registrierung auf unserer Seite werden wir zudem das Datum sowie die Uhrzeit Ihrer Registrierung speichern. Dies dient in dem Fall, dass ein Dritter Ihre Daten missbraucht und sich mit diesen Daten ohne Ihr Wissen auf unserer Seite registriert, als Absicherung unsererseits. Eine Weitergabe Ihrer Daten an Dritte erfolgt nur nach Zustimmung und/oder im Falle einer Teilnahme am Verhandlungsprozess. Ein Abgleich der so erhobenen Daten mit Daten, die möglicherweise durch andere Komponenten unserer Seite erhoben werden, erfolgt nicht.

Voluntary information

If you voluntarily provide data to us using our forms and these are not required for the performance of our contract, we process the data in the legitimate assumption that the processing and use of this data is in your interest.

Recipients / Disclosure of Data

However, data that you provide to us will not be passed on to external third parties only after consent. In particular, your data will not be disclosed to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or for other products or services. It may occur that a service provider receives knowledge of personal data. We carefully select our service providers – in particular with regard to data protection and data security – and take all necessary data protection measures for permissible data processing.

Where is the data processed?

The data will be processed exclusively in data centers in the Federal Republic of Germany.
If personal data is processed outside the European Union you will be able to recognize this from previous explanations.

Privacy notices for applicants

The following data will be collected in connection with your application in our company:

Data collection of applicants

We process personal data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions) and to carry out the application process. The processing of the applicant data is carried out on the basis of Section 26 of the German Data Code (BDSG).

Period of data storage

Data of candidates applying for internal posts will be deleted in the event of a cancellation after the expiry of six months, provided that no other legitimate interests of the controller conflict with deletion.
If you have received a commitment for a job as part of the application process, the data will be transferred to our personnel information system.
Data of applicants applying for project-related positions will remain stored in our pool of applicants for the entire duration of the placement, as is necessary in compliance with the statutory retention periods for the respective task performance.
Furthermore, your data will be deleted after two years, unless you have given us consent for further storage.

Disclosure

A specially developed software solution is used for the application process. The applicant data will be screened by the HR department upon receipt of the application. Appropriate applications are forwarded internally to the department managers for the respective open position. Then the further procedure is agreed. In the company, only those persons who need this for the proper conduct of our application process have access to your data.
We only collect, store and process your transmitted personal data to the extent necessary for the processing of enquiries or the processing of orders and you have previously consented. You have the right to revoke your consent with effect for the future at any time.
In order to best support you in your application efforts, we share your personal data with our affiliates in order to verify matching to other projects. In addition, their data will not be passed on to third parties without agreement. The data will only be passed on to third parties beyond consent if we are obliged to do so by compelling legal regulations or if you determine this yourself.

Security

We are using all necessary technical and organizational security measures to protect your personal data from loss and misuse. Your data is saved in a secure operating environment that is inaccessible to the public. Furthermore, data is encrypted during the transfer by so-called Transport Layers Security (TLS). This means that an approved encryption procedure is used for communication between your computer and our servers.

Existence of automated decision-making

As a responsible company we refrain from automatic decision-making or profiling.

Data protection supervisor

We are not obliged to designate a data protection officer. You can send questions about data protection to datenschutzbeauftragter@procuretechs.changepoint.de by e-mail. The use of this email address for other purposes is explicitly prohibited.

Your rights as a person concerned

You have the right to be informed about your personal data. You can contact us for information at any time. In the cases of a request for information that is not carried out in written form, we kindly ask you to understand that we need a proof that you are the person who you claim to be. Furthermore, you have the right to rectification, erasure or restriction of processing to the extent permitted by law.
In addition, you have a right to object to the processing within the scope of the legal requirements. The same applies to a right to data portability. In particular, if you wish to exercise a right of objection to the processing of your data on the basis of a balance of interests, you must expect that we will subject this to a thorough examination. We have carefully weighed up our interests here. So please read Article 21 GDPR carefully and expect that we will also ask questions about the “special situation” in article 21 sec.1 GDPR.
Finally, you also have a right to data portability. Here, too, this is only granted within the scope of the legal requirements.

Deletion of data

In principle, we delete personal data when there is no need for further storage. . However, it can be necessary to store data in order to fulfill contractual obligations to examine warranty and guarantee claims. In addition, it is indispensable to store data to grant or defend the mentioned claims. In order to comply with the statutory retention period, a deletion shall only be carried out after expiration of the respective retention period.

Right to complain to a supervisory authority

You have the right to to lodge a complaint with a supervisory authority regarding the processing of your personal data. The competent supervisory authority depends on the federal state of your residence, your work or the suspected infringement. .

Cookies

We use cookies on our websites. By using cookies, it is possible to optimize the website in the interests of the user and to provide user-friendly services. Cookies are small text files that are stored on your computer system. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit. When cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie.
In some cases, the cookies are used to simplify the visit to the website by storing settings. If individual cookies implemented by us also process personal data, the processing will be carried out in accordance with Art. 1 lit. b GDPR either for the implementation of the contract or in accordance with Article 6(3) 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit. In the case of cookies that are not necessary, but for the purpose of marketing measures and their tracking, cookies are used on the basis of consent. Art. 6 Abs. 1 lit a GDPR. This means that you must give your consent to the processing and use of these cookies in advance. For this purpose, we use a so-called Consent Management Tool (often called “Cookie Banner”) through which you have the possibility to change your decision.

The following cookies are used by us:

Google

Google Webfont

We use Google Web Fonts on our websites. This program downloads fonts from Google servers, which serve to improve the design of the website. The data processing constitutes a justified interest, whereby our interest lies in an attractive design and presentation of our website.

These fonts are downloaded from Google servers, which are usually located in the United States. The appropriate level of data protection is ensured by standard contractual clauses.

Google reCAPTCHA

n order to ensure sufficient data security when submitting forms, we use in certain cases the service reCAPTCHA of the company Google Inc. . This is primarily used to distinguish whether the input is made by a natural person or abused by automated processing. The service includes the sending of the IP address and, if applicable, other data needed by Google for the reCAPTCHA service of Google. The different data protection regulations of Google apply to this
Inc. For more information about the Google Inc. Privacy Policy see https://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/.

Google Re/Marketing Services

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer) in accordance with the Art. 6 Abs. 1 lit. f) GDPR we use the marketing and remarketing services (short “Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”). The appropriate level of data protection is ensured by standard contractual clauses.
The Google Marketing Services allow us to more clearly display advertisements for and on our website. Users are presented with ads that potentially correspond to their interests. In the case of remarketing a user sees ads for products he’s been interested in on other websites. For these purposes, Google will immediately execute a code and so-called (re)-marketing tags (invisible graphics or code, also called “web beacons”) will be incorporated into the website once you call it up or other websites where Google Marketing Services are active. As a result an individual cookie, i.e. a small file, is stored on the device of the user. Cookies may be set by different domains including google.com, invitemedia.com, doubleclick.net, admeld.com, googleadservices.com or googlesyndication.com. This file contains what content the user is interested in and what website he has visited. Furthermore, it is noted which offers he has clicked, which referencing websites, technical information about the browser and operating system, visit time and other information on the use of the online offer

Google Adwords

We use the Google advertising tool “Google-Adwords” to promote our website. As part of this, we use the analysis service “Conversion Tracking” of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. If you have reached our website via a Google ad, a cookie will be stored on your computer. These so-called “conversion cookies” expire after 30 days and do not serve your personal identification. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognize that you, as a user, have clicked on one of our ads placed on Google and have been redirected to our site. The information obtained using the “conversion cookies” is used by Google to compile visit statistics for our website. Through this statistic, we learn the total number of users who clicked on our ad and also which pages of our website were subsequently accessed by the respective user. However, we or other advertisers via “Google-Adwords” do not receive any information with which users can be personally identified.
You can prevent the installation of the “conversion cookies” by setting your browser accordingly, for example by means of a browser setting, which generally disables the automatic setting of cookies or specifically only blocks the cookies from the domain “googleadservices.com”. Google’s privacy policy can be found at the following link: https://services.google.com/sitestats/de.html.

Doubleclick Ad Exchange

This website uses the online marketing tool Doubleclick. As soon as Doubleclick Ad Exchange, a web ad service of Google Inc., USA (“Google”), places advertisements (text ads, banners, etc.) on this website, your browser may store a cookie sent by Google Inc. or third parties. The stored information may be recorded, collected and evaluated by Google Inc. or third parties. In addition, the Doubleclick Ad Exchange also uses so-called “WebBeacons” (small invisible graphics) to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated (by cookie and/or WebBeacon) about your use of this website is transmitted to a Google server in the USA and stored there. In order to evaluate their usage behaviour with regard to Doubleclick Ad Exchange ads, Google uses the information obtained in this way. This information may also be transferred to third parties by Google if this is required by law or if third parties process this data on Google’s behalf.
If IP addresses are transmitted and stored in this context, this only takes place for fighting and filtering spam/fraud (ad impression spam and click spam).
This data is only available to the anti-abuse teams. Google does not associate the IP address with other data stored by Google.

Indeed

This website can use Web Analysis Tools from Indeed Ireland Operations, Ltd., 124 St. Stephen’s Green, Dublin 2, Ireland – Conversion Tracker. For the analysis of the use of the website and Indeed.com (if applicable) certain usage data that your browser transmits is collected and evaluated by Indeed. In order to collect this usage data, Indeed may use one or more cookies. It also transmits the IP address assigned to your device at the time, as well as a browser-specific identifier. The IP address is required solely for session identification and geolocation (up to city level).

Matomo

This website uses Matomo, an open source, self-hosted software to collect anonymous usage data for this website. The data on visitors’ behaviour is collected to identify possible problems such as undiscovered pages, search engine problems or unpopular pages. As soon as the data (number of visitors see the error pages or only one page, etc.) is processed, Matomo generates reports for the website operators so that they can react to them.
Matomo processes the following data:

  • Cookies
  • Anonymized IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
  • Pseudoanonymized location (based on anonymized IP address
  • Date and time
  • Title of the page accessed
  • URL of the page accessed
  • URL of the previous page (if it allows)
  • Resolution
  • Local time
  • Files that have been clicked and downloaded
  • External links
  • Duration of page construction
  • Country, region, city (low accuracy due to IP address)
  • Main language of the browser
  • User Agent of the browser
  • Interactions with forms (but not their contents)

At Matomo, all your data can be requested at any time. You can also request at any time that Matomo deletes all your data completely and contradicts the data collection by selecting DoNotTrack in your browser.

Online social media presences

We maintain online presence on social networks and platforms in order to communicate with customers and interested parties that are active on those pages. Furthermore, we inform customers about our services. The terms and conditions and the data processing guidelines are based on the operating websites of the respective networks.

We only process the users’ data if they communicate with us via social networks. This would be the case if users post on our social network sites or send messages to us.

Consent Newsletter

Es besteht die Möglichkeit, auf unserer Internetseite auch einen E-Mail-Newsletter zu abonnieren um Sie über neue Angebote zu informieren.
Wir verarbeiten neben den freiwilligen Angaben im jeweiligen Formular dazu nur Ihre E-Mail-Adresse. However, this is also mandatory. In order to analyze and optimize the popularity of our newsletter sands, we log when emails have been opened and links have been clicked. This usage analysis is carried out on the basis of a Balance of interests. You may object to this processing by: unsubscribe from the newsletter.

CleverReach

Wir verwenden zum Versand unserer Newsletter die Komponente CleverReach. Bei CleverReach handelt es sich um eine Dienstleistung der Firma CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Deutschland. Ihre bei der Newsletter Anmeldung gespeicherten Daten (E-Mail-Adresse, ggf. Name, IP-Adresse, Datum sowie die Uhrzeit Ihrer Anmeldung) werden an einen Server der Firma CleverReach GmbH & Co. KG in Deutschland übertragen und dort gespeichert. Die Datenschutzbestimmungen des Versanddienstleisters können Sie auf der Website von CleverReach einsehen. The legal basis for the establishment of the shipping service provider is based in accordance with Article 6(1) lit.f) GDPR for the protection of
of our legitimate interests and a contract processing contract in accordance with Art. 28 sec. 3 S.1 DSGVO. The shipping service provider uses
the data of our newsletter recipients in order to write to them themselves or to pass on data to third parties.
Sie können den Newsletter jederzeit abbestellen. Alternativ finden Sie einen Link zur Abmeldung in jeder Newsletter-E-Mail.

Youtube

Our website includes YouTube videos stored on http://www.YouTube.com by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter YouTube) and can be playable directly from our website. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This is done regardless of whether this third party provides a user account through which you are logged in or whether there is no user account.
If you are logged in to YouTube, this data will be assigned directly to your account. If you do not want to be assigned to your profile on YouTube, you must log out before activating the button. YouTube stores this data as user profiles and uses it for the purposes of advertising, market research and/or the design of its website according to needs. Such an evaluation is carried out in particular (even for non-logged-in users) for the provision of demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube in order to exercise this.
For more information on the purpose and scope of data collection and its processing by YouTube and Google, please visit their websites in the area of data protection. There you will also find more information about your rights in this regard and settings options to protect your privacy.
You can object to the use of YoutTube videos if you post this in our Cookie Conset Manager.
The legal basis for this processing of the data is your consent in accordance with Article 6 sec. 1 lit. a GDPR.

Facebook Pixel / Facebook Conversion Tracking

For the purpose of analysing and optimizing our website we use Facebook Conversion Tracking, the so-called “Facebook pixel” of the social network Facebook. These services are provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you are located in the EU, the service provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”).
By using the Facebook pixel, Facebook is able to identify visitors to our website as a potential target group for the display of ads (so-called “Facebook ads”). Therefore, we use the Facebook pixel to display Facebook ads which we run only to those Facebook users who have shown an interest in our website or who have certain characteristics (interests that are determined by websites visited, etc.). We transmit this information to Facebook and thus form so-called “Custom Audiences”. By using the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of visitors and are not perceived as harassment. By using the Facebook pixel, we can understand the effectiveness of Facebook ads statistically and for the purpose of market research. We analyze whether visitors are redirected to our website after clicking on a Facebook ad, i.e. whether a so-called “conversion” takes place.
For the processing of the data by Facebook there are general hints https://www.facebook.com/policy.php. More information and details about the Facebook pixel can be found here: https://www.facebook.com/business/help/651294705016616. The appropriate level of data protection is ensured by standard contractual clauses.
You may object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To set what types of ads you see within Facebook, you can go to the page facebook-set up and follow the settings for usage-based ads: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
You can object to the use of the Facebook pixel if you set this in our Cookie Conset Manager.
The legal basis for this processing of the data is your consent in accordance with Article 6 sec. 1 lit. a GDPR.

Using LinkedIn

We use the conversion tracking technology and the retargeting function of LinkedIn Corporation on our website.
This technology allows visitors to this website to run personalized ads on LinkedIn. It also provides the ability to generate anonymous reports on the performance of the ads, as well as information about website interaction. For this purpose, the LinkedIn Insight tag is integrated on this website, which establishes a connection to the LinkedIn server, provided that you visit this website and are logged into your LinkedIn account in parallel.
The LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy provides more information about data collection and use, as well as ways and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate the data collection at any time at the following link: https://www.linkedin.com/psettings/enhanced-advertising.
You can object to the use of the LinkedIn pixel if you set this in our Cookie Conset Manager.
The legal basis for this processing of the data is your consent in accordance with Article 6 sec. 1 lit. a GDPR.

Training

If you participate in one of our trainings or training, we will process your name and email address for the purpose of planning and conducting the event.
If you have booked the event via a corresponding partner portal, the information will be provided by the latter. We then process your data on the basis of the legal basis of Art. 1 lit. b) GDPR.

Modification of the data protection notices

We will revise this privacy statement in the event of changes concerning this website whenever it may be required. The current version can always be found on this website.