who we are

365paintings.com

Content responsibility: Mathias Bleckmann, Kurparkstrasse 20, 38723 Seesen, Germany, e-mail: needle @ online.de

Privacy policy

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and pursuant to the statutory data protection regulations and this privacy policy.

Various personal data are collected when you use this website. Personal data are data which can be used to identify you personally. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.

We would like to point out that data transfer on the Internet (for example when communicating by email) may have security vulnerabilities. It is not possible to provide 100% protection for your data from access by third parties.

I Responsibility for data processing
The controller responsible for the processing of data on this website under Art. 4 No. 7 GDPR is

Mathias Bleckmann
Kurparkstrasse 20
38723 Seesen
Phone: +49 (0)5381 7859 366

You can contact our Data Protection Officer as follows:
Email: needle @ online.de

#365paintings

II Rejection of advertising mails
We hereby reject the use of contact details published as part of the legal information obligation to send advertising and information materials which have not been expressly requested. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited receipt of advertising information, for example by spam emails.

III Data recording on our website
When you visit our website, we process your personal data as follows:

1. Server log files

a. Type and scope of data processing
The provider of the site automatically collects and saves information which your browser automatically sends to us in so-called server log files. These are as follows:

• IP address
• Date and time of the request
• Referrer URL
• Host name of the accessing computer
• Browser type and browser version
• Operating system and its interface

These data are not combined with other data sources.

b. Purpose of data processing
The collection of data to provide the website and saving the data in log files is essential for operating the website. There is therefore no right on the part of the user to object to this.

c. Legal basis
The basis for the data processing is Art. 6 (1) lit. f GDPR. The temporary storage of the IP address is required to enable the website to be delivered to the user’s computer. The user’s IP address must be saved for the duration of the session for this purpose. Log files are saved to ensure the functionality of the website and the security of our information technology systems.

d. Duration of storage
The data will be erased as soon as they are no longer required to achieve the purpose for which they were collected. For collecting the data to provide the website, this is when the session is ended.

For saving the data in log files, this is the case after seven days at the latest, the backups are stored in encrypted form for 14 days.

e. Right to object and deletion option
Due to the fact that the data required for providing the website and the saving of the data in log files is essential for operating the website, users have no right to object to the data being processed.

2. Cookies

a. Type and purpose of data processing
Cookies are small text files which are placed on your computer and are saved by your browser. They are used to make the website more user-friendly, effective and secure. Cookies do not cause any damage to your computer and do not contain viruses.

The website uses various essential cookies to ensure that it functions correctly and to make it easier to navigate for users, as well as cookies which are not essential for the technical functioning of the website, but enable us to carry out various tasks, particularly analyses.

When our website is opened, the user is notified of the use of essential cookies and of other non-essential cookies and their consent to process the personal data used in this respect (relating to the non-essential cookies) is obtained. This notification also includes information about this privacy policy.
Further details of the cookies used are also provided in the appropriate paragraphs of this privacy policy.

b. Legal basis
The legal basis for processing personal data using technically essential cookies is Art. 6 (1) lit. f GDPR. Our legitimate interest is the provision of the website.

c. Duration of storage, right to object and deletion option
Cookies are saved on the user’s computer and sent from the computer to our site. Therefore, as the user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, it is possible that you will be unable to use all the features of this website.

Furthermore, we refer your attention to the consent tool on our website in which you can select your choice relating to settings for all non-essential cookies.

3. Email contact and contact form

a. Type and scope of data processing
You can contact us using either a contact form provided on our website or by email using the email address provided on our website.

If you contact us using the contact form, the data you enter in the input mask will be sent to us and saved when you send them. The following data will be saved:

• User’s email address
• User’s name
• Country of origin
• Subject
• Free text box for the message
• Browser type and browser version
• Operating system and its interface
• Date and time when the contact was accepted
• Optional: Degree/professional qualification
• Optional: Current profession
• Optional: Age
• Optional: Gender

Before you send the completed contract form, your consent to our processing the data is obtained, and reference is made to this privacy policy.

Furthermore, you can contact us using the provided email address. In this case, your personal data submitted with the email will be saved. The data will not be forwarded to third parties.

b. Purpose and legal basis for data processing
Your data will be processed exclusively to handle your concern. In the event that you contact us by email, this also comprises the required legitimate interest in processing the data. The other personal data processed when you send your query are used to prevent any abuse of the contact form and ensure the security of our information technology systems.

The legal basis for processing the data if the user’s consent has been obtained is Art. 6 (1) lit. a of the GDPR. The legal basis for processing the data sent in an email is Art. 6 (1) lit. f GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing the data is Art. 5 (1) lit. b GDPR.

c. Duration of storage, right to object and erasure option
The data will be erased when they are no longer required to achieve the purpose for which they were collected, in other words when the conversation with you, the user, is ended or the matter has been fully clarified.

You have the opportunity at any time to revoke your consent for processing the personal data (see below “Revocation of consent declarations”).

4. Newsletter

a. Type and scope of data processing
It is possible to subscribe to our free newsletters on our website, a jobs newsletter with vacancies in Germany for qualified personnel and/or a general website newsletter. When you subscribe to the newsletter, the data from the input mask are sent to us. You must enter your email address to subscribe for the newsletter. Furthermore, the following data are collected during the subscription process:

NEWSLETTER

• Email address
• IP address of the requesting computer
• Date and time of registration

Only your email address is essential for us to send you the newsletter.

b. Legal basis and purpose for data processing
The legal basis for processing the data after a user has subscribed to the newsletter is the user’s consent under Art. 6 (1) lit. a GDPR.

e. Duration of storage, right to object and erasure option
The data you send to us for the purposes of subscribing to the newsletter are used by us to send you the newsletter and, if you unsubscribe from the newsletter, they will be erased both from our servers and CleverReach’s servers one week after your erasure request has been confirmed. Data saved by us for other purposes will not be affected by this. Further details about CleverReach’s privacy policy are available at: https://www.cleverreach.com/de/datenschutz/

You can revoke your consent at any time by unsubscribing from the JOBS newsletter and/or the GENERAL newsletter. The legality of any data processing operations, which have already been performed, will not be affected by this revocation. If you do not wish to allow any analysis by CleverReach relating to the general newsletter, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter. You can also unsubscribe from the JOBS newsletter by sending an email to make-it@iwkoeln.de.

IV Your rights

1. Information, restriction of processing, erasure
   Under the current statutory regulations set out in Art. 15 of the GDPR, you have the right at any time to be provided with free of charge information about the personal data, their origin and recipients stored on you, the purpose of the data processing and, if applicable, under Art. 16 of the GDPR, the right to demand the rectification, restriction of processing (Art. 18 GDPR) or erasure of these data (Art. 17 GDPR). For this purpose and if you have any other questions relating to personal data, you can contact us at any time using the address provided above.
2. Right to data transferability
   You have the right to have any data, which we process automatically on the basis of your consent or to fulfil a contract, to be sent to you or a third party in a commonly used, machine-readable format (Art. 20 GDPR). If you request that the data are sent direct to a different controller, this will only be done if it is technically feasible.
3. Right to complain to the relevant supervisory authority
   In the event of breaches of data protection law, the data subject has the right to complain to the relevant supervisory authority (Art. 77 GDPR and Section 19 German Federal Data Protection Act [BDSG]). The relevant supervisory authority in data protection matters is the state data protection officer of the German state in which our company is located. A list of data protection officers and their contact details is available using the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
4. Revocation of consent declarations
   There are data processing procedures which are only possible with your express consent. You can revoke any consent you have already given at any time. You only need to send an informal notification to us by email for this purpose. The legality of any data processing operations, which have been performed before the revocation, will not be affected by this revocation.

V Your right to object under Art. 21 GDPR
You have the right, for reasons resulting from your specific situation, to object at any time to us on an informal basis against the processing of your personal data taking place on the basis of Art. 6 (1) lit. e GDPR (data processing in the public interest) and Art. 6 (1) lit. f GDPR (data processing on the basis of a legitimate interest). If you submit an objection, we shall cease to process your personal data unless we can provide evidence that there are compelling grounds, which merit protection, for processing the data which outweigh your interests, rights and freedoms, or the data processing is taking place for the purpose of lodging, exercising or defending legal claims.

VI Analysis and advertising tools used

1. Web analysis by Matomo:

a. Type and scope of data processing
We use the open source software tool Matomo (previously known as PIWIK) from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, on our site to analyse our users’ habit surfing habits. This software sets a cookie on your computer (see above for further details of cookies). When you open the website, the following data are saved:

• Three bytes of the IP address of the user’s system
• The opened website
• The website from which the user accessed the opened website (referrer)
• The sub-sites which were opened from the opened website
• The amount of time spent by the user on the website
• The frequency with which the website was opened
• Browser including version
• Operating system
• Device type
• Date and time

This software runs exclusively on the servers of our hosting contract partner in Germany. The user’s personal data will only be saved there. The data will not be forwarded to third parties. It is not possible to use the data to identify an individual as your IP address is anonymised immediately after being processed and before being saved.

This website uses Matomo with the “AnonymizeIP” extension. This processes IP addresses in shortened form so as to rule out the possibility that they can be used to identify an individual. The IP address sent by your browser by Matomo will not be combined with other data we collect.

The Matomo program is an open source project. Information from this third party service provider about data protection is available at https://matomo.org/privacy-policy/

b. Purpose of data processing
Users’ personal data are processed to enable us to analyse the surfing habits of our users. By evaluating these data, we are able to compile information about the use of the various components of our website. This helps us to continuously improve our website and make it more user-friendly.

c. Legal basis for data processing
The basis for the use of Matomo is Art. 6 (1) sentence 1 letter f GDPR. Our legitimate interest for its use is that we can improve our website using the statistics acquired through Matomo and make our website more interesting for you, the user.

d. Duration of storage
The data will be erased as soon as they are no longer required for our recording purposes, but at the latest after one year. The set cookie is valid for 13 months after which it will be deleted.

e. Rights to object and deletion option
Cookies are saved on your computer for such analytical purposes (for further details see Section III 2a). The data collected in this way is saved by the controller exclusively on its server in Germany. You can adjust the evaluation by deleting existing cookies and preventing cookies being saved. If you prevent cookies being saved, we would like to point out that it is possible you will be unable to use all the features of this website. You can prevent cookies being saved using a setting in your browser. You can prevent Matomo being used by removing the following check and therefore enabling the opt-out plug-in:

Further information on the privacy settings of the Matomo software package is available using the following link: https://matomo.org/docs/privacy/

VII Social media

1. Social media links
   If you use the social media icons of Facebook, Twitter, YouTube, etc. on our website, your personal data will not automatically be forwarded. To prevent automatic data transfers to the service providers of social media, these services are included on our website by means of Internet links. We have no joint data protection responsibility if your data are processed by these service providers for purposes defined by them.

Our social media sites are part of our public relations work. Our aim is to inform appropriate target groups and exchange information with them.

All our social media service providers are certified under the EU-US Privacy Shield, and this can be viewed by anybody, which means that a legally reasonable level of protection is provided for personal data:

• Facebook, Inc. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active),
• Twitter Inc. (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active),
• Google LLC (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI)

2. YouTube plug-in
   After you click on one of the preview images from the YouTube website operated by Google, this website uses plug-ins to embed video content. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you open a sub-site with an embedded video, a connection is made to the YouTube servers. At this point YouTube is notified which of our pages you have visited. We use YouTube’s extended data protection to embed YouTube videos. When this option is used, none of our visitors’ data are saved unless they actually view the video (the video can be started by clicking on it).

If you start an embedded video on our website, Google will process and save various data (IP address, our website’s sub-site on which the video is embedded, etc.). If you are logged into your YouTube account, YouTube may assign your surfing habits direct to your personal profile. You can only prevent this if you log out of your YouTube account before viewing the video. The provider of this website has no influence on the transfer of these data.

YouTube videos are embedded with the purpose of making our website more attractive. This is also our legitimate interest in accordance with the legal basis set out in Art. 6 (1) lit. f GDPR.

Further information about how user data are handled is available in YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy.

VIII Additional services

1. Google reCAPTCHA:
   We use “Google reCAPTCHA” on this website (hereinafter known as “reCAPTCHA”). This service is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether data entered on this website (for example in a contact form) are being entered by a human or an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor using various features. This analysis starts automatically as soon as the website visitor opens the website. reCAPTCHA evaluate various information for its analysis (for example IP address, device and application data, time spent by the visitor on the website and mouse movements by the user). The data recorded during the analysis are forwarded to Google and may also be shared with other third parties.

The reCAPTCHA analyses are run completely in the background. Website visitors are not notified that an analysis is taking place.

The data are saved and analysed on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated spying and SPAM. If an appropriate consent has been sought, the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; this consent can be revoked at any time.

More information about Google reCAPTCHA is available in the Google privacy policies and Google conditions of use by clicking on the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

2. GoToWebinar
   The website operator uses the GoToWebinar software package to organise and provide online webinars. The supplier is LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (hereinafter known as “GoToWebinar”).

If you attend one of our webinars, your personal data will be saved on the GoToWebinar servers for the purposes of completing the event. This involves the following data:

• Email address
• Browser and system data
• IP address
• Language and time zone
• Chat data
• Other data you enter yourself (for example name, telephone number or customer number, support queries and chat messages)
• User data from webinars (for example access figures, application histories, registration in and participation in a webinar, opening of specific pages, etc.)

These data are saved by GoToWebinar for the specific purpose and erased once this purpose no longer exists. The legal basis for using GoToWebinar is Art. 6 (1) lit. b GDPR (contract fulfilment) and our legitimate interest in the professional organisation of our webinars (Art. 6 (1) lit. f GDPR). If an appropriate consent has been sought, the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; this consent can be revoked at any time.

Conclusion of a contract for commissioned data processing services
We have concluded a contract with GoToWebinar in which we oblige GoToWebinar to protect our customers’ data and not to forward them to third parties.

3. OpenStreetMap
   We use the OpenStreetMap (OSM) map service. This service is provided by the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

When you visit a website in which OpenStreetMap is embedded, your IP address and other information about your behaviour on this website are forwarded to OSMF. In certain circumstances, OpenStreetMap will save cookies in your browser or may use similar recognition technologies.

Furthermore, your location may be recorded if you have permitted this in your device settings (for example on your mobile phone). The provider of this website has no influence on the transfer of these data. Details are provided in the OpenStreetMap privacy policy at the following link: https://wiki.osmfoundation.org/wiki/Privacy_Policy

OpenStreetMap is used to provide an attractive display of our website and to make the locations specified on our website easy to find. This constitutes a legitimate interest in the sense of Art. 6 (1) lit. f GDPR. If an appropriate consent has been sought (for example consent to save cookies), the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; this consent can be revoked at any time.

4. Google conversion tracking

a. Type and scope of data processing
Furthermore, we use so-called conversion tracking as part of our use of the Google AdWords service. If you click on an advertisement inserted by Google, a cookie for conversion tracking is placed on your computer/device. These cookies lose their validity after 30 days, do not contain any personal data and can therefore not be used for personal identification purposes. The information obtained using the conversion cookie is used to prepare conversion statistics for AdWords customers who have chosen to use conversion tracking. Users’ data are processed in pseudonym form as part of the Google Marketing Service. This means that Google, for example, does not save all process users’ name or email address, but instead processes the pseudonym user profiles relevant to the appropriate data cookie. In other words, from Google’s point of view, the advertisements are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly permitted Google to process these data without this pseudonymisation. The information about users collected by Google Marketing Service are transferred to Google and saved on Google’s servers in the USA.

The Google Marketing Services used by us include the online advertising program “Google AdWords”. We particularly use the remarketing function within the Google AdWords service. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. This means that cookies cannot be traced using AdWords customers’ websites. The information obtained using the cookie is used to prepare conversion statistics for AdWords customers who have chosen to use conversion tracking. AdWords customers are supplied with the total number of users who have clicked on the advertisement and who have continued to a page with a conversion tracking tag. However, they do not contain any information that allows users to be personally identified.

We use Google’s Remarketing technology. This technology sends users targeted advertising on Google Partner Network’s websites, if they have already visited our webpages and online services and have shown an interest in these. The advertising is displayed by the use of cookies. The use of these text files enables the behaviour of users to be analysed when they visit the websites and then used for targeted product recommendations and interest-based advertising. No personal data from the visitors to the websites are saved.

Further information about using data for advertising purposes by Google is provided on the summary site: https://www.google.com/policies/technologies/ads, Google’s privacy policy can be viewed at https://www.google.com/policies/privacy.

More information about Google and the Google (Ads) can be viewed at http://www.google.com/privacy/ads/.

Google is certified under the Privacy Shield Convention, thus guaranteeing compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

b. Legal basis for data processing
The data are processed on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest is in enhancing our website.

c. Right to object and deletion option
You can permanently disable the use of cookies by Google by using the following link and then downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. You can also disable the appropriate cookies by opening the NAI (Network Advertising Initiative) disabling page at http://www.networkadvertising.org/choices/.

Furthermore, you can disable advertisements on Google and interest-related Google advertisements (within the Google Display Network) in your browser by clicking on the “Off” button at https://adssettings.google.de or disabling it at http://www.aboutads.info/choices. Further information about possible settings and data protection at Google is available at https://www.google.de/intl/de/policies/privacy/?fg=1.

If you would like any information that this privacy policy cannot provide or if you would like more information on a specific point, please contact the controller named above.