Privacy policy

 

Information obligation according to Article 13 GDPR

Data protection statement

Dear Sir or Madam

With this data protection statement we would like to inform you about the processing of your personal data by "Bayern International – Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH" as well as the rights you are entitled to under data protection law. In doing so, we first want to provide you with information under the heading "General information", which applies to all data processed by "Bayern International – Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH". Under the heading "Special data processing" you will then find more detailed information on selected data processing operations.

Third parties such as online platforms like Facebook or YouTube, to which links are provided on our websites, may also collect, use or pass on information. This data protection statement does not apply to such third parties or their services and we cannot assume any responsibility for how these third parties may use any information they collect.

Click here for the imprint.

General information

1.1 Who is responsible for data processing and who is the data protection officer?

Privacy policy

Dear Sir or Madam,

 


We would like to use this privacy policy to inform you about the processing of your personal data by Invest in Bavaria, the Business Promotion Agency of the Bavarian State Ministry of Economic Affairs, Regional Development and Energy and Bayern International – Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH, as well as the rights to which you are entitled under data protection law.

 

1 General information

 

1.1 Who is responsible for data processing, and who is the data protection officer?

 

The following parties are jointly responsible for data processing for Invest in Bavaria – The Business Promotion Agency of the Free State of Bavaria

 

Bayern International –

Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH


Rosenheimer Str. 143c

81671 Munich

T: 089 660566-0

F: 089 660566-150

E: info@bayern-international.de

 

Contact details of the data protection officer:

ComFor-IT oHG

Datenschutz

Bahnhofstraße 6

84405 Dorfen

E-mail: datenschutz@comfor-it.de

datenschutz@bayern-international.de and datenschutz@invest-in-bavaria.de

 

and

 

Bayerisches Staatsministerium für Wirtschaft, Landesentwicklung und Energie Prinzregentenstraße 28
80538 Munich

T: 089 21 62-0F: 089 21 62-27 60

E: info(at)stmwi.bayern.de

 

Contact details of the data protection officer:

Behördliche Datenschutzbeauftragte des


Bayerischen Staatsministeriums für Wirtschaft, Landesentwicklung und Energie


Prinzregentenstraße 28

80538 Munich

T: 089 21 62-23 95

F: 089 21 62-33 95

E: datenschutz(at)stmwi.bayern.de

 

You can contact both Bayern International and the Bavarian State Ministry for Economic Affairs, Regional Development and Energy, in order to exercise your data protection rights.

 

1.2 What personal data do we have about you, and where does it come from?

 

The categories of personal data processed include, in particular, the following data:

 

  • Your master data (first name, last name, name affixes, functions, date of birth, if applicable)
  • Contact details (address; landline and mobile phone number, e-mail address and links to Xing, Linkedin and Facebook)
  • Data that you give us in the context of participation in an event or trade fair

 

Your personal data is always collected directly from you. In some cases, we also collect personal data from publicly accessible sources (e.g. the Internet, trade fair catalogues, lists of participants at events, targeted contact searches with the help of e.g. the consulates based in Bavaria, as well as technology networks in Germany and abroad).

 

1.3 For what purposes and on what legal basis is data processed?

 

As a rule, the purpose of the processing is to fulfil the public task of location promotion, foreign trade promotion and investor advertising assigned to Bayern International by the Bavarian State Ministry of Economic Affairs, Regional Development and Energy. In this regard, Bayern International supports the location marketing efforts undertaken by the Bavarian Ministry of Economic Affairs within the framework of the Invest in Bavaria Business Promotion Agency, and works closely with business organisations both at home and abroad.

 

These include, in particular,

  • the organisation of Bavarian participation in trade fairs and exhibitions, as well as proprietary Bavarian events,
  • organising forms of cooperation exchange at home and abroad in cooperation with chambers and associations, and promoting business cooperation locally,
  • organising visits to Bavaria, as well as abroad,
  • the promotion of Bavaria as a business location,
  • supporting domestic and foreign companies in setting up and developing a business location in Bavaria, and
  • organising and managing training and development programmes for the benefit of the Bavarian export industry.

 

If you have contacted us, given us your business card, registered in our database, or participated in one of our events, we assume that you are, in principle, interested in our events and projects. Therefore, your data will be processed by us, in order to send you appropriate offers and invitations by e-mail, among other things.

 

The legal basis for the processing of your data, unless otherwise stated, is Art. 4 (1) of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 (1) lit. e of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data necessary to fulfil a task incumbent upon us.

 

You have the right to object to the processing of your data at any time for reasons arising from your particular situation, if the processing is carried out exclusively on the basis of Art. 6 (1) lit. e GDPR (Art. 21 (1) Sentence 1 GDPR) or if the processing of your data is carried out for advertising purposes (Art. 21 (2) GDPR).

 

The processing of your personal data will continue

  • insofar as the processing is based on your consent, in accordance with Art. 6 (1) lit. a GDPR.
  • insofar as the processing is necessary for the performance of a contract that you have concluded with us, or for the implementation of pre-contractual measures that take place at your request, on the basis of Art. 6 (1) lit. b GDPR; 
  • insofar as we are obliged to process on the basis of statutory provisions on the basis of Art. 6 (1) lit. c GDPR;
  • insofar as the data processing is carried out on the basis of a so-called balancing of interests on the basis of Art. 6 (1) lit. f GDPR. In these cases, said interest is communicated in the context of the respective processing.

1.4 How long will your data be stored?

 

We regularly check and update our databases. We will delete your personal data as soon as it is no longer required for the above-mentioned purposes. We will also delete your data without fail if you exercise your right of revocation or objection, unless we are obliged to retain the data due to legal requirements.

 

1.5 Who receives your data?

 

Within Bayern International – Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH and the Bavarian State Ministry of Economic Affairs, Regional Development and Energy, your personal data is sent to the persons and offices that need it to fulfil the above-mentioned tasks.

 

In addition, we use external service providers to fulfil our tasks, e.g. trade fair implementation companies, marketing and event agencies, travel agencies and publishers. For the purpose of sending you information, invitations and newsletters, we commission service providers to process your data in accordance with your instructions. We obligate them to protect your data in accordance with the law.

 

If necessary, your data will be transmitted to the competent supervisory and auditing authorities for the exercise of the respective control rights. We would like to point out that Bayern International is a public body according to Art. 1 (2) of the Bavarian Data Protection Act (BayDSG), so that the regulations on the transfer of personal data according to Art. 5 Bavarian Data Protection Act (BayDSG) apply.

 

1.6 What rights can you assert as a data subject?

 

You have the rights under Articles 15 to 22 of the GDPR:

  • Right to the disclosure of information (Art. 15 GDPR): if your personal data is being processed, you have the right to receive information about the data stored about you.
  • Right to rectification (Art. 16 GDPR): if inaccurate personal data is being processed, you have the right to rectification.
  • Right to erasure and restriction of processing (Art. 17, 18 GDPR): if the legal requirements are met, you may request the erasure or restriction of processing.
  • Right to data portability (Art. 20 GDPR): if you have consented to the data processing or a contract for data processing exists, and the data processing is carried out with the help of automated procedures, you may have a right to data portability.
  • If we process your data for the performance of the public task assigned to us pursuant to Art. 6 (1) Sentence 1 lit. e GDPR or for the protection of legitimate interests pursuant to Art. 6 (1) Sentence 1 lit. f GDPR, you may object to this processing at any time for reasons arising from your particular situation pursuant to Art. 21 (1) GDPR.
  • You also have the right to object at any time to the processing of your data for advertising purposes in accordance with Art. 21 (2) GDPR.

If the data processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR, this consent can be revoked at any time in the future. This does not affect the lawfulness of the data processing until the consent is revoked.

If you wish to revoke (or assert) any of the above rights, you may do so vis-à-vis Bayern International or the Bavarian State Ministry for Economic Affairs, Regional Development and Energy.

 

Principally, please contact:

 

Bayern International

Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH

Rosenheimer Str. 143c

81671 Munich

E-mail:  datenschutz@invest-in-bavaria.de 

 


For more information on the processing of your personal data, you can contact us using the above contact details.

 

1.7 Where can you lodge a complaint?

 

You also have the option to lodge a complaint with the data protection supervisory authority. The data protection supervisory authority responsible for us is:

 

Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)

Wagmüllerstr. 18

80538 Munich

E-mail: poststelle@datenschutz-bayern.de 

 

1.8 Will your data be transferred abroad, including to a so-called “third country”?

 

We work with partners abroad who support us in carrying out our tasks (e.g. chambers of commerce abroad, Bavarian Representative Offices abroad, travel agencies; cf. also No. 1.5.). Insofar as it is necessary for the implementation, we transfer your personal data abroad, including to so-called “third countries”.

 

1.9 Are you obliged to provide your data?

 

The provision of your personal data is neither legally nor contractually required. You are not obliged to provide us with your personal data. However, if you do not provide the data, you will no longer receive any information, invitations etc. from us.

2 Internet data processing

2.1. Cookies

 

The Invest in Bavaria website uses cookies. Cookies are text files that are stored on a computer system via an Internet browser.


Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified via the unique cookie ID.


Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.


By means of a cookie, the information and offers on our website can be optimised in the interests of the user. Cookies enable us, as already mentioned, to recognise the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website because this is done by the website and the cookie stored on the user’s computer system.


The data subject can prevent the setting of cookies by our website at any time by means of the appropriate Internet browser settings, and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programmes. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser in use, not all functions of our website may be fully usable.

 

2.2 Consent tool from Usercentrics

 

We use the cookie consent technology from Usercentrics on our website to obtain your consent to the storage of certain cookies on your end device, or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).

 

The use of Usercentrics serves the purpose of proving consent given and not given, as well as the management thereof. The legal basis for the processing of data by Usercentrics is Art. 6 (1) S. 1 lit. f GDPR. Our legitimate interest lies in the legally secure documentation and verifiability of consents, as well as controlling the services we use on the basis of the consents granted.

 

2.3 Note on data transfer to the USA

 

Among other things, services from providers based in the USA are integrated on our website. When these services are active, your personal data may be transferred to the US servers of the respective companies.

As a secure third country, the USA generally maintains a level of data protection comparable to that of the EU. A data transfer to the USA is then permitted if the recipient possesses a certification under the “EU-US Data Privacy Framework” (DPF), or has suitable additional guarantees in place. You can view the list of certified companies at www.dataprivacyframework.gov.

We would like to draw your attention to the fact that, for data transfer to providers who are not certified according to the EU-US Data Privacy Framework (DPF), the USA is to be regarded as a third country that is not classified as secure under data protection law, in which no level of data protection comparable to that in the EU can be guaranteed.

We have concluded a contract with these providers – including the so-called EU standard contractual clauses. Taking into account the data protection needs, we consider the level of protection with reference to the EU standard contractual clauses to be adequate.

 

2.4 Collection of general data and information

 

The website collects a series of general data and information with each call-up of the website by a data subject or an automated system. This general data and information are stored in the server’s log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

 

When using these general data and information, we do not draw any conclusions about the data subject. This information is rather required in order to (1) correctly deliver the contents of our website, (2) optimise the contents of our website, as well as the pertinent advertising, (3) ensure the permanent functionality of our information technology systems and the technology of our website, as well as (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, on the one hand, this data and information are statistically evaluated and, on the other hand, it is evaluated with the aim of increasing the data protection and data security of our enterprise so as to ultimately ensure an optimal level of protection for the personal data we process.  The legal basis for this is Art. 6 (1) lit. f GDPR.

 

SSL or TLS encryption

 

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

2.5 Use of Google Analytics and Display Advertising

 

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

 

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Invest in Bavaria has activated the IP anonymisation option offered by Google on this website. This means that your IP address will be shortened by the last 8 bits beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

 

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage vis-a-vis the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

 

You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website.

 

Furthermore, you can object to the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google with effect for the future, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Deleting this browser plug-in ends the objection.

 

Invest in Bavaria uses the following Google Analytics features for display advertising, i.e. remarketing, reports on impressions in the Google Display Network, DoubleClick Campaign Manager integration and Google Analytics reports on performance by demographic characteristics and interests. You can deactivate Google Analytics for display advertising and customise the ads on the Google Display Network by accessing the ad settings. You can also download the browser add-on to deactivate Google Analytics at the following link: http://tools.google.com/dlpage/gaoptout.

 

Invest in Bavaria uses remarketing with Google Analytics for online advertising. Our ads are served on third-party websites (including Google). We and third-party vendors (including Google) use first-party cookies (e.g. Google Analytics cookies) and third-party cookies (e.g. DoubleClick cookies) together to serve, target and optimise ads based on your previous visits to our website.

 

Invest in Bavaria uses Google Analytics reports on performance by demographic characteristics and interests. We use data obtained from Google’s interest-based advertising and third-party visitor data (e.g. age, gender and interests) in Google Analytics for trend analysis and marketing.

 

The data processing is based on your consent in accordance with Art. 6 (1) lit. a GDPR. Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at www.google.com/analytics/terms/de.html . Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

2.6 Google Tag Manager

 

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to embed tracking or statistical tools, as well as other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It is only used for the administration and execution of the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

Use of the Google Tag Manager is based on Art. 6 (1) lit. a and f GDPR.

 

2.7 Google Ads Conversion Tracking

 

Invest in Bavaria also uses Google Conversion Tracking. Google Ads will set a cookie on your computer if you have accessed our website via a Google ad. These cookies lose their validity after 30 days, and are not used for personal identification. If the user visits certain pages of the Google Ads client’s website and the cookie has not yet expired, Google and the client will be able to recognise that the user has clicked on the ad and been redirected to that page. Each Google Ads client receives a different cookie. Cookies can, therefore, not be tracked via the websites of Google Ads clients. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Google Ads clients will ascertain the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

 

The data processing is based on your consent in accordance with Art. 6 (1) lit. a GDPR.

If you do not wish to participate in the tracking procedure, you can also refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy policy on conversion tracking can be found here: https://services.google.com/sitestats/de.html

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

2.8 Google DoubleClick

 

This website uses functions of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).

 

DoubleClick is used to show you interest-based ads across the Google advertising network. With the help of DoubleClick, the advertisements can be targeted to the interests of the respective viewer. For example, our advertising may be displayed in Google search results or in advertising banners associated with DoubleClick. In order to be able to display interest-based advertising to users, DoubleClick must be able to recognise the respective viewer and associate the websites visited, clicks and other information on user behaviour with them. For this purpose, DoubleClick uses cookies or comparable

recognition-based technologies (e.g. device fingerprinting). The information collected is combined into a pseudonymous user profile, in order to display interest-based advertising to the relevant user.

 

The use is based on Art. 6 (1) lit. a GDPR; the consent can be revoked at any time. For further information on how to object to the advertisements displayed by Google,

please see the following links:

https://policies.google.com/technologies/ads and

https://adssettings.google.com/authenticated 

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

2.9 Google Translate

 

This website uses Google Translate functions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

If Google Translate is activated and data is transferred to Google. In addition to the URL of the visited page, your IP address is also transmitted. This information is usually transferred to a Google server in the USA and stored there.

The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

The use is based on Art. 6 (1) lit. a GDPR; the consent can be revoked at any time. You can find more information here: https://cloud.google.com/translate/data-usage

 

2.10 Google Maps

 

This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

 

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

2.11 Facebook Retargeting

 

We have a profile on Facebook. The provider of Facebook is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, your data will be transferred to Meta Platforms Inc. in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

When you visit our pages, a direct connection is established between your browser and the Facebook server via the remarketing tags. Facebook thereby receives the information that you have visited our site with your IP address. This enables Facebook to assign the visit to our pages to your user account. We can use the information obtained in this way to display Facebook Ads. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. For more information, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

 

2.12 Embedded YouTube videos

 

Our website uses plug-ins from the YouTube site operated by Google. The operator of the pages is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

 

When you visit one of our pages equipped with a YouTube plug-in, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

2.13 Use of social media plug-ins

 

We use various social media plug-ins. The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR.

Should the provider of a social network also be based in the USA, your personal data may be transferred to the US servers of the respective company and processed there.

 

Facebook

 

Our website uses social plug-ins (“plug-ins”) of the social media network facebook.com, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The plug-ins are recognisable by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign), or are marked with the addition “Facebook Social Plug-in”. The list and appearance of Facebook social plug-ins can be viewed here: http://developers.facebook.com/plug-ins.

 

When you visit a website on our Internet presence that contains such a plug-in, your browser establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted directly to your browser by Facebook and integrated into the website by it. We, therefore, have no influence on the scope of the data that Facebook collects with the help of this plug-in and, therefore, would like to inform you based on our current understanding that:

By integrating the plug-ins, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for example, by clicking the Like button or leaving a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a registered user of Facebook, there is still a possibility that Facebook will ascertain and store your IP address.

For the purpose and scope of the data collection and the further processing (and use) of the data by Facebook, as well as your rights in this regard and setting options for the protection of your privacy, please refer to Facebook’s privacy policy: http://www.facebook.com/policy.php.

If you are a registered Facebook user and do not want Facebook to collect data about you via our website and link it to your membership data stored on Facebook, you must log out of Facebook before visiting our website.

It is possible to block Facebook social plug-ins with add-ons for your browser, for example, with the “Facebook Blocker”.

According to Facebook, your data will be transferred to Meta Platforms Inc. in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

Google Plus

 

Our website uses the “+1″ button of the social media network Google Plus, which is operated by Google Ireland Limited (”Google“), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The button can be recognised by the sign “+1” on a white background.

When you visit a website on our Internet presence that contains such a button, your browser establishes a direct connection with Google’s servers. The content of the “+1” button is transmitted directly to your browser by Google and integrated into the website by it. We, therefore, have no influence on the scope of the data that Google collects with the button, but assume that your IP address is also collected.

For the purpose and scope of the data collection and the further processing (and use) of the data by Google, as well as your rights in this respect and setting options for protecting your privacy, please refer to Google’s data protection information on the “+1” button: http://www.google.com/intl/de/+/policy/+1button.html.

If you are a registered Google Plus user and do not want Google to collect data about you via our website and link it to your user data stored with Google, you must log out of Google Plus before visiting our website.

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

LinkedIn

 

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

 

LinkedIn receives information when you use your LinkedIn account to sign in to a third party website or application. When you visit the Computacenter Newsroom with embedded LinkedIn job-related plug-ins such as “Recommend on LinkedIn”, LinkedIn also collects information that the corresponding pages have been loaded in your Internet browser.

If you visit a website with plug-ins from LinkedIn and are logged in as a user of LinkedIn, LinkedIn uses this information to recommend content specifically relevant to you. This information is used to personalise the features provided to you by LinkedIn on third party websites. Among other things, you can expand your knowledge through your LinkedIn network and exchange information with your network (direct contacts and 2nd degree contacts). Users who wish to deactivate this personalisation can reject this function here. LinkedIn’s retention of this data is covered in Section 3.2. of the privacy policy.

LinkedIn does not use this information for advertising purposes. LinkedIn may provide companies hosting LinkedIn plug-ins and similar technologies with reports containing aggregate impression-related information, in order to enable them to measure the traffic generated by LinkedIn on their website. You can opt out of LinkedIn’s use of your impression data by clicking here. The current privacy policy of LinkedIn can be found on this website: http://www.linkedin.com/legal/privacy-policy#info-collected.

 

Xing

 

The “XING Share Button” is used on this offer. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

 

When this website is accessed, the user’s browser briefly establishes a connection to servers of XING AG (“XING”), with which the “XING Share Button” functions (in particular, the calculation/display of the counter value) are provided. XING does not store any personal data of the user about the call of this offer. In particular, XING does not store IP addresses. There is also no evaluation of usage behaviour via the use of cookies in connection with the “XING Share Button”. Users can access the current data protection information on the “XING Share Button” and supplementary information on this website: https://www.xing.com/app/share?op=data_protection.

 

X

 

Functions of the X service are integrated on this website. These functions are offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. We would like to point out that we, as the provider of the web pages, have no knowledge of the content of the transmitted data or its use by X. Further information on this can be found in Twitter’s privacy policy at:

https://twitter.com/de/privacy.

 

Details can be found here:

https://gdpr.twitter.com/en/controller-to-controller-transfers.html

 

You can change your Twitter privacy settings in the account settings under

https://twitter.com/account/settings.

 

2.14 Interactive competence map

 

When accessing the subpage with the Interactive Competence Map provided, additional applications are loaded by our service provider. Information on this can be found in the privacy policy directly in the map.

 

2.15 Hotjar

 

This website uses Hotjar, an analytics software provided by Hotjar Ltd Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. With Hotjar, it is possible to measure and evaluate the usage behaviour (clicks, mouse movements, scroll heights, etc.) on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there.

 

The tracking code collects the following information:

  • The IP address of your device (collected and stored in an anonymised format)
  • Your e-mail address including your first and last name, insofar as you have made this available to us via our website
  • Screen size of your device
  • Device type and browser information
  • Geographical position (country only)
  • The preferred language to display our website

 

Hotjar will use this information for the purpose of evaluating your use of our website, compiling reports on website usage and providing other services relating to website usage and the Internet-related evaluation of the website.

 

The cookies that Hotjar uses have different “lifetimes”; some remain valid for up to 365 days, some remain valid only during the current visit. You can prevent the collection of data by Hotjar by clicking on the following link and following the instructions there:

https://www.hotjar.com/opt-out

 

We use various social media plug-ins. The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. For more information about Hotjar and the data collected, please see Hotjar’s privacy policy at the following link: www.hotjar.com

 

2.16 ReadSpeaker

 

We use the tool ReadSpeaker, of ReadSpeaker Holding B.V, Princenhof park 13, 3972 NG Driebergen-Rijsenburg, The Netherlands.

 

When you click on the “Read aloud” link, the text or text passage from the website is transferred to a server of the ReadSpeaker company using your IP address, where an audio file is generated and sent back to your IP address in a streaming process. Immediately after delivery of the audio file, the process and the user’s IP address are deleted from the ReadSpeaker server.

 

When using the ReadSpeaker function, cookies are stored on the end device in order to retain the settings selected by the user (highlight setting, text size, etc.) and deleted again after the session or, depending on the function, an appropriate period of time (maximum 30 days).

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. You can find more information here: https://www.readspeaker.com/blog/readspeaker-webreader-conforms-gdpr-standards/

 

2.17 Media Math Targeting

 

This website uses tracking technologies from MediaMath, INC, New York (USA) (hereinafter “MediaMath”) for a more targeted and interest-based ad delivery.

 

This function is used to present interest-based ads to visitors of the website within the MediaMath advertising network.

 

The website visitor’s browser uses cookies, mobile advertising IDs, web beacons or pixel tags that, when stored on your computer, enable the recognition of the visitor when they visit websites that belong to MediaMath’s advertising network. Here, campaign content and job advertisements can then be played to the visitor in a targeted manner, which relate to content that the visitor has previously accessed on other websites.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. You can find out more about data use at MediaMath here: http://www.mediamath.com/de/datenschutzrichtlinien

https://www.mediamath.com/ad-choices-opt-out/

 

2.18 Mouseflow

 

We use Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. When you visit our website, various information about your access is collected, including clicks and mouse movements, information about the browser, language, operating system and the referrer URL. You can find more information here: https://mouseflow.com/de/gdpr/. The data will be stored for up to 12 months.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. If you do not wish to be recorded, you can deactivate this on all websites that use Mouseflow using the following link: www.mouseflow.de/opt-out/

 

 

 

2.19 Salesviewer

 

On our website, data is collected and stored for marketing, market research and optimisation purposes using the SalesViewer® technology of SalesViewer® GmbH, Huestraße 30, 44787 Bochum. From this data, usage profiles can be created under a pseudonym. For this purpose, so-called tracking scripts are used to collect company-related data.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. You can object to the collection and storage of data at any time with effect for the future by please visiting the link https://www.salesviewer.com/opt-out to prevent the collection within this website in the future. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you must click this link again.

 

2.20 The Rubicon Project

 

On our website, we use the digital advertising service The Rubicon Project from The Rubicon Project Ltd, Walmar House, 5th Floor, 296 Regent St. London, W1B 3HR, United Kingdom.

 

The Rubicon Project places cookies. Here, anonymised data about the IP address, location and advertisements clicked on are processed, in order to optimise the advertisements on websites that participate in the advertising network. The data may be shared with other companies associated with The Rubicon Project.

 

You can object to the collection and storage of data at any time with effect for the future by visiting the link https://www.magnite.com/legal/consumer-online-profile-opt-out/ to prevent the collection within this website in the future.

 

The use on our website is based on your consent according to Art. 6 (1) lit. a. GDPR. You can find more information here: https://www.magnite.com/legal/advertising-technology-privacy-policy/

3 Information about our mailings

In order to sign up to receive information about our events and projects, we will send it to you by e-mail. The personal data used for registration is specified in the input mask used for this purpose. The salutation, first name and last name are used to address the recipients personally.

 

Our mailing efforts allow us to analyse the recipients’ behaviour. Among other things, it can be analysed as to how many recipients have opened the mailing, and how often a given link was clicked. With the help of this evaluation, we are able to improve our mailing work and make them even more informative for you.

 

As a rule, your personal data is used for the purpose of fulfilling the public task assigned to us on the basis of Art. 4 (1) Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 (1) lit. e GDPR. You have the right here to object to the processing of your data at any time for reasons arising from your particular situation, if the processing is carried out exclusively on the basis of Art. 6 (1) lit e GDPR (Art. 21 (1) sentence 1 GDPR).

 

Furthermore, a mailing is only sent on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. Registration is voluntary, and you can unsubscribe from our mailings at any time.

 

4 Subscription to our newsletter

On the Invest in Bavaria website, users are given the opportunity to subscribe to our company newsletter. As to which personal data is transmitted to the data controller when ordering the newsletter is determined by the input mask used for this purpose. The service provider we use to send the newsletter is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede.

 

The personal data collected as part of a registration for the newsletter is used to send our newsletter. The salutation, first name and last name are used to address the recipients personally. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or a change in the technical circumstances.

 

The use of your personal data is based on your consent in accordance with Art. 6 (1) lit. a GDPR.  Subscribers to the newsletters can cancel the subscription themselves at any time; the e-mail addresses are automatically deleted as a result.

 

When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration, as assigned by the Internet service provider (ISP), as well as the date and time of registration. The collection of this data is necessary, in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date, and, therefore, serves as a legal safeguard for the data controller.

 

The personal data collected as part of a registration for the newsletter is used to send our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or a change in the technical circumstances.

 

The newsletter contains so-called tracking pixels. A tracking pixel is a thumbnail graphic that is embedded in such e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH may see if and when an e-mail was opened by a data subject, and which links contained in the e-mail were called up by the data subject.

 

Such personal data collected via the tracking pixels contained in the newsletters are stored and analysed by the data controller, in order to optimise the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. Data subjects are entitled, at any time, to revoke the separate declaration of consent given in this regard via the double opt-in procedure. After a revocation, these personal data will be deleted by the data controller. Unsubscribing from the receipt of the newsletter is automatically interpreted as a revocation.

5 Communication with Invest in Bavaria

5.1 Contact us by phone or e-mail or contact form

 

You have the option of contacting us via our e-mail address, by telephone or via the contact form provided. We process the data you provide for this purpose in order to process your contact enquiry and handle it.

 

The indication of your company name, as well as the industry from which your company originates, serve to forward the enquiry to the responsible employee for processing. The purpose of providing a website or social media account address is to ensure that only companies that actually exist and wish to make a serious enquiry contact us, thus protecting us from spam enquiries.

 

5.2 Video conferencing tools

 

We use various programmes to communicate with you.

 

If you communicate with us by video or audio conference via the Internet, personal data will be collected and processed by us and the provider of the respective conference tool. The conference tool collects all data that you provide during the use of the tools, as well as the duration of the conference, start and end (time) of participation in the conference, number of participants and other contextual information related to the communication process (metadata).

 

In addition, the provider of the tool processes all technical data required to handle online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

 

If content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool provider. Such content includes (but is not limited to) chat/instant messages, voice mails, uploaded photos and videos, and files shared while using the service.

6 Events and digital events

Invest in Bavaria also acts as organiser or co-organiser of various events. In the event of an invitation to (or participation in) an event, we process personal data (name, address, etc.). This can be done via different communication channels (e.g. by filling in a form, a web form, by e-mail, by phone).

 

The personal data that is transmitted to us in the process results from the respective form, the respective input mask or the data requested in a possible conversation. As a recipient of letters/invitations, you can object to the sending of further letters/invitations at any time.

 

The data processing is carried out upon your request/registration for the following purposes:

 

  • The processing of your personal data is initially carried out, insofar as we perform public tasks within the scope of foreign trade promotion and investor advertising, on the basis of Art. 6 (1) lit. e GDPR.
  • Insofar as the processed data is necessary to hold the event or to organise it in advance, the legal basis is Art. 6 (1) lit. b GDPR.
  • If the data processing does not primarily serve the implementation of the event, the legal basis is Art. 6 (1) lit. f GDPR. The legitimate interest is to provide participants with a comprehensive service during the event, to provide them with additional information about the event, and to provide, operate and improve the services used. 
  • If you have given us your consent for the processing of your data, the legal basis for this is Art. 6 (1) lit. a GDPR. You have the right to revoke your consent for the future at any time.

 

Personal data will not be transferred to third parties without authorisation, but will be stored and processed for the purpose of organising and handling events (such as drawing up guest lists, enabling access controls, etc.). Invest in Bavaria may arrange for the data to be passed on to one or more processors who will use the personal data on behalf of the event.

 

In the context of participation in the online event, different categories of data of the participants are processed. The type and scope of the data processed depends on the type of event, as well as on the information you provide and the functions you use as part of your participation.

 

Depending on the type of event, Invest in Bavaria acts as organiser alongside another cooperation partner. In these cases, the data collected for event purposes will be transferred to our cooperation partners, who may use this data for the proper execution of the event. As to which cooperation partners these are in each individual case will be communicated separately within the framework of the organisation of the event.

The data will only be stored for as long as is necessary for the organisation and processing of the events.

 

Photo & Video Shooting

 

As part of our press and public relations work, photos and videos are taken at events and appointments, in which you may be visible. We base the production and publication of photos in connection with the event on our legitimate interest in promoting our image and reporting on the event. The photos will be published on our website and our social media presences to cover the event. You can object to the recording and/or publication. Please use the above contact details for your objection or inform us directly on site when registering for the event that you do not agree with the recording and/or publication.

 

Data collection from accompanying persons

 

For the proper handling of the event, the data of persons accompanying the participants who have been invited will also be collected and processed. Like all other persons affected by data collection, these persons are entitled to the above-mentioned rights, in particular, to the disclosure of information about the type and scope of the stored data, to object to the processing and to delete the data. In this respect, reference is made to the explanations on the rights of the data subject under “General information”.

7 Careers

We process the data you have sent us in connection with your application, in order to assess your suitability for the position (or other open positions in our companies, if applicable), and to perform the application process.

 

The legal basis for the processing of your employee data is primarily Art. 88 GDPR in conjunction with Art. 26 Federal Data Protection Act (BDSG) and, if applicable, Art. 6 (1) lit. b GDPR for the initiation of contractual relationships. According to this, the processing of data is permissible if this is necessary for the establishment of an employment relationship.

 

Should the data be required for legal prosecution after completion of the application procedure, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular, to safeguard legitimate interests pursuant to Art. 6 (1) lit. f GDPR. Our interest then consists in asserting or defending claims.

 

If you provide us with your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR.

 

We process your personal data as long as this is necessary for the establishment of the employment relationship, or for the exercise (or fulfilment) of the obligations arising from a law. Finally, the storage period also depends on the statutory limitation periods. Applicant data will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data is deleted when it is no longer relevant for filling further positions.

8 Social media appearances

In the following, we would like to inform you about the processing of your personal data when using our profile. Processing takes place when you visit our profile and when you send us a message.

 

Please note that social media networks generally analyse your user behaviour extensively and use it to create user profiles, which are utilisied, among other things, to show you personalised advertising. We, therefore, ask you to carefully check which data you share with us via the profile. As long as you are logged into your account, the operator of a social media network can assign your visit and your use of our profile to your user account. Your personal data may also be collected under certain circumstances if you are not logged in or do not have a user account with this social media network.

 

We would like to point out that we cannot track all data processing on the social media network. For more information on data processing by the operator of the social media network, please refer to the respective privacy policy of the social media network.

 

Data controller and the rights of the data subject

 

We, Invest in Bavaria, consisting of a joint responsibility between Bayern International – Bayerische Gesellschaft für Internationale Wirtschaftsbeziehungen mbH and the Bavarian State Ministry of Economic Affairs, Regional Development and Energy, and together with the operator of the social media network, are jointly responsible for the data processing that is triggered when you visit our profile. You may assert your rights as a data subject both against the operator of the social media network and against us.

 

Data collection and legal basis

 

The processing of your data when visiting our profile is based on Art. 6 (1) lit. e GDPR insofar as we perform public tasks in the context of promoting foreign trade and investor advertising. Our aim is to ensure the broadest possible presence on the Internet through our involvement on social media networks.

 

Please refer to the data protection guidelines of the social media network to find out on which legal basis the operator of the social media network bases the processing of your data.

 

Should the provider of a social network also be based in the USA, your personal data may be transferred to the US servers of the respective company and processed there.

 

As a secure third country, the USA generally maintains a level of data protection comparable to that of the EU. A data transfer to the USA is then permitted if the recipient possesses a certification under the “EU-US Data Privacy Framework” (DPF), or has suitable additional guarantees in place. You can view the list of certified companies at www.dataprivacyframework.gov.

 

We would like to draw your attention to the fact that, for data transfer to providers who are not certified according to the EU-US Data Privacy Framework (DPF), the USA is to be regarded as a third country that is not classified as secure under data protection law, in which no level of data protection comparable to that in the EU can be guaranteed.

 

A contract is concluded with these providers – including the so-called EU standard contractual clauses. Taking into account the data protection needs, we consider the level of protection with reference to the EU standard contractual clauses to be adequate.

 

Deletion and storage period

 

The data that we collect directly from you via our profiles will be deleted from our system as soon as the purpose for storing it no longer applies, you request us to delete your data or you revoke any consent you have given.

 

We have no influence on the storage period of your data, which is used by the operator of the social media network for its own purposes. You can find details of this in the privacy policy of the social media network.

 

Social media networks in detail:

 

Facebook

 

We have a profile on Facebook. The provider of Facebook is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

We have a profile on Facebook. The provider of the Facebook service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, your data will be transferred to Meta Platforms Inc. in the USA and other third countries.

 

We have entered into the Controller Addendum, a joint processing agreement provided by Facebook. You can view this agreement at the following link:

www.facebook.com.

 

We use the “Facebook Insights” functions to obtain statistical data about the use of and visitors to our profile. The legal basis is Art. 6 (1) lit. f GDPR for the optimisation of our profile on Facebook in the context of promoting foreign trade and investor advertising. You can find more information on data processing by Meta Platforms Ltd. within the framework of “Facebook Insights” here:

www.facebook.com

 

You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in:

www.facebook.com

 

You can find Facebook’s privacy policy at: https://www.facebook.com/about/privacy/

According to Facebook, your data will be transferred to Meta Platforms Inc. in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

X

 

We use the messaging service X. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

 

You can adjust your privacy settings independently in your user account. To do so, click on the following link and log in:

https://twitter.com/personalization 

 

For details, please refer to Twitter’s privacy policy: twitter.com

 

LinkedIn

 

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

 

If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 

 

For details on how your personal data is handled, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy 

 

Youtube

 

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how your personal data is handled, please refer to YouTube’s privacy policy: https://policies.google.com/privacy?hl=de 

According to the provider, your data will be transferred to Google LLC in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

Instagram

 

We have a profile on Instagram. Instagram is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to the provider, your data will be transferred to Meta Platforms Inc. in the USA. The basis for third country transfers is the EU-US Data Privacy Framework (DPF).

 

You can adjust your settings in your user account. To do so, click on the following link and log in:

https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/

 

You can view Instagram’s privacy policy here:

https://help.instagram.com/519522125107875

We are looking forward to getting in touch with you.

Category*
Please select
arrow
Branch
Please select
arrow
Salutation*
Please select
arrow
Country*
Please select
arrow
* Mandatory fields