ABONA Verwaltungs GmbH takes the protection of your personal data very seriously. For this reason, we will inform you here about the personal data we collect and how we treat it.
The person responsible within the meaning of the Basic Data Protection Regulation and other applicable data protection laws of the member states of the European Union is
ABONA Verwaltungs GmbH
Heinrich-Blanc-Strasse 30 | 76646 Bruchsal Germany
Phone: 07251 9760-0
Data protection officer for the processing of data is
76646 Bruchsal | Germany
Data subjects can contact our data protection officer directly at any time if they have any questions or suggestions regarding data protection.
A data protection declaration must clearly indicate how personal data is handled on the website. In order to guarantee this, we would like to explain the terms used in advance.
We use the following terms in this data protection declaration:
Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. IP address or cookies) or to one or more specific characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Processing means any operation carried out with or without the aid of automated procedures, or set of operations, relating to personal data. This basically includes any handling of personal data such as collection, storage, modification, use, transmission, dissemination, erasure or destruction etc..
The controller is a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. The data controller must ensure the permissibility of data processing through the use of technical and organisational measures that are regularly reviewed.
Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients
Third party means any natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.
Consent is an expression of data protection self-determination. It is the voluntary expression of intention, in the specific case, in an informed and unequivocal manner, in the form of a statement or other clearly confirmatory act by which the data subject indicates his or her consent to the processing of personal data concerning him or her. Consent given may be withdrawn at any time.
In general, we only collect data which we need for the provision of our services. The collection and use of your personal data is regularly only carried out with your consent or if the processing of the data is permitted by legal regulations.
Paragraph 6 of the DSGVO provides for the processing of personal data only if certain conditions are met. This means that the processing of personal data is in principle unlawful, unless consent has been given or the processing is permitted by a legally regulated reason for permission.
If we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis.
Art. 6 para. 1 lit. b DSGVO serves as a legal basis for processing operations that are necessary for the fulfilment of a contract concluded between you and us or for the implementation of pre-contractual measures.
If the processing of personal data is necessary to fulfil a legal obligation to which we are subject, such as statutory storage and retrieval obligations, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
Art. 6 para. 1 lit. d DSGVO is the legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data.
If the processing is necessary to safeguard our interests or the legitimate interests of a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former, the processing of personal data is legitimised by Art. 6 para. 1 lit. f DSGVO.
In principle, your data will only be passed on to third parties with your express consent, unless it is a legal obligation which we must comply with.
In order to provide our network services, we make use of service providers who act within the framework of order processing on the basis of Art. 28 DSGVO.
This means that our contract processors are carefully selected and bound by our instructions.
The DSGVO guarantees an equally high level of data protection within the European Union. Accordingly, we only allow the transfer of your personal data to a third country if the requirements of Article 44 DSGVO are fulfilled.
To be more precise, this means that your data may only be processed if special guarantees exist.
In accordance with the DSGVO, any personal data will be deleted as soon as the purpose for which it was collected no longer exists. Unless there are reasons for not deleting the data in accordance with Article 17 (3) DSGVO.
We do without automatic decision making or profiling.
If we process personal data from you, you are affected in the sense of the DSGVO. You are entitled to the following rights vis-à-vis us as the responsible party
If the processing of personal data is based on a consent given by you, you have the right to revoke this consent at any time. This revocation will not affect the legality of the processing based on your consent.
You have the right to information from us as to whether your data will be processed by us. If this is the case, you can request information about the following information:
We will attempt to provide you with a copy of the personal data under processing within one month of receiving your written request for information.
You have the right to have erroneous personal data corrected immediately.
We are obliged to delete personal data immediately if one of the following reasons applies:
If the personal data concerning you has been made public by us, we are obliged in the event of the requested deletion, taking into account the available technologies and implementation costs, to take appropriate measures, also of a technical nature, to ensure the deletion of your data.
You do not have the right to deletion ("right to be forgotten") if processing is necessary:
You have the right to demand that we restrict the processing of your personal data if one of the following conditions is met:
If processing has been restricted in accordance with the above conditions, such personal data will be processed only with your consent or for the purpose of asserting, exercising or defending legal rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State, with the exception of their storage.
If the processing restriction has been limited in accordance with the above conditions, we will notify you before the restriction is lifted.
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer such data to another controller without our interference, provided that the processing is based on consent or a contract and is carried out using automated procedures.
You have the right to object to the processing of your personal data at any time. We will then no longer process the personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
You have the right to complain to the supervisory authority if you are of the opinion that the processing or storage of your personal data violates the DSGVO.
We only collect information from you which we need in order to make our online offer available.
As long as you use our website for information purposes only personal data is collected which is necessary for technical reasons to display our website and to guarantee stability and security.
The provider of the site processes information that your browser automatically transmits. These are
The legal basis for data processing is Art. 6 Para. 1 lit. f) DSGVO. Our "interest" within the meaning of Art. 6 para. 1 lit. f) is the operation of this website and the implementation of the protection objectives of confidentiality, integrity and availability of data.
Our cookies used are so-called "session cookies". They are automatically deleted at the end of your visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you are stored on the basis of Art. 6 para. 1 lit. f DSGVO. As website operators, we have a justified interest in the storage of cookies for the technically error-free and optimised provision of our services. No cookies are stored which track your surfing behaviour.
If you send us an e-mail, this data will be stored by us. These e-mails are archived by us and deleted after six years. The basis for this is Art. 17 para. 3 lit. b) DSGVO and Art. 6 para. 1 lit. f) DSGVO, whereby our interest is the fulfilment of statutory retention periods. Excluded from archiving:
As an existing customer you can receive our free e-mail newsletter. These newsletters will only be sent with your consent. For this purpose we store your data as long as the subscription of the newsletter is active.
This processing of your data for the purpose of sending the newsletter requires your consent. In addition, you must confirm that you are aware of the data protection declaration. We use the double opt-in procedure in the registration process for this purpose. After successful registration, you will receive an e-mail in which you must click on a link to confirm your registration. In this way, we prevent unauthorized third parties from registering using your e-mail address. We log the registration process in order to be able to prove the process according to the legal requirements. The IP address of the calling terminal, date and time of registration are stored.
The data provided by you will be stored as long as the newsletter subscription is active. You can cancel your subscription at any time. For this purpose, each newsletter contains a corresponding unsubscribe link. This also enables you to revoke your consent. The legal basis for the processing of your data with given consent for the receipt of newsletters is Art. 6 para. 1 lit. a DSGVO.
You can object to this use of your data at any time by sending a message to the above-mentioned contact options or via the unsubscribe link in the advertising mail.
Our newsletters may contain so-called "tracking pixels", which are pixel-sized files that are retrieved from our server when the newsletter is opened. These pixel-code files do not contain any personal data and are only used for statistical purposes to determine whether and which links contained in the newsletters are clicked. This information cannot be assigned to individual newsletter recipients.
Our online offer contains links to other websites. We have no influence on whether their operators comply with data protection regulations.
We offer online services on various social media platforms in order to provide you with information and to get in touch with you.
We have no influence on the processing of personal data by the respective platform operator. As a rule, when you visit our social media services, the platform operator stores cookies in your browser, in which your usage behaviour or interests are stored for market research and advertising purposes. The user profiles obtained in this way - mostly across all devices - are used by the platform operators to display personalised advertising. Data processing may also affect persons who are not registered as users with the respective social media platform. Under certain circumstances, your data may be processed outside the European Union, which can make it more difficult to enforce your rights. When selecting such social media platforms, however, we make sure that the operators undertake to comply with the data protection standards of the EU.
The processing of your personal data when you visit one of our social media services is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information opportunity as well as communication with you. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. Under certain circumstances, you have also given a platform operator consent to data processing, in which case Art. 6 para. 1 lit. a DSGVO is the legal basis.
Detailed information on data processing in connection with the use of our social media services, opt-out options and the assertion of information rights can be obtained from the data protection declaration of the relevant platform operator.
Supplier: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Supplier: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Supplier: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Supplier: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Supplier: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany)
Our offer is basically aimed at adults. Persons under the age of 16 may not transmit any personal data to us without the consent of their parents or legal guardians.
If you contact us by e-mail, telephone or fax, your request including all personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the enquiries addressed to us.
The data you send us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after the processing of your request has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). In the following we will inform you about the scope, purpose and use of your personal data collected during the application process.
We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated strictly confidentially.
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary for a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu according to German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a DSGVO. Consent may be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 Para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data transmitted by you including any remaining physical application documents will be stored for a maximum of 6 months after completion of the application process (retention period) in order to be able to trace the details of the application process in the event of discrepancies (Art. 6 Para. 1 lit. f DSGVO).
You may object to this storage if you have legitimate interests that outweigh our interests.
After expiry of the retention period, the data will be deleted unless there is a legal obligation to retain or any other legal reason for further storage.
If it is evident that the retention of your data will be necessary after the expiry of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other legal storage obligations remain unaffected.
Translated with www.DeepL.com/Translator