Data Privacy new
1. Information about the collection of personal data
With this privacy policy we intend to inform you about the collection of personal data when using our website. Personal data means any information relating to an identified or identifiable natural person (“data subject”), e.g. name, address, email addresses, user behaviour.
The controller pursuant Art. 4 (7) GDPR is Global Organizational Integrity Institute GmbH, Bahnhofstraße 3, 82166 Gräfelfing, Germany, Telephone: +49 (089) 212 363 55-0, E-Mail datenschutz@goii.org, (see our legal notices).
Data Protection Officer:
Luisa Scherf
InfiniSafe GmbH
You can address any question with regard to this policy and privacy aspects in general to:
If for some activities we use subcontractors or external service providers, we inform you in detail below about the respective activities. In doing so, we also name the specified criteria for the storage duration.
2. General information on the content of this policy
In the sections below, we will provide you with specific information regarding the aspects mentioned in this Section 2. In order to provide more clarity, please see the information below regarding each aspect.
Possible purposes of processing
(Each specific purpose will be addressed below in detail)
- Application procedure (justification and possible later implementation as well as possible later termination of the employment relationship)
- Contact requests and communication.
- Tracking (e.g., collecting statistics)
Legal bases for processing personal data (legal permission based on Art. 6 GDPR)
Art. 6 (1) (a) GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfil a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 (1) (b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. In that case, the processing would be based on Article 6 (1) (d) GDPR. Ultimately, processing operations could be based on Article 6 (1) (f) GDPR. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, GDPR).
Transmission to third countries and third parties
If we process data in a third country, i.e. outside the European Union (EU) or the European Economic Area (EEA), or if processing takes place in the context of using the services of third parties or of disclosing or transferring data to other persons, bodies or companies, this is only done in accordance with the legal requirements.
Subject to express consent or a contractually or legally required transfer, we will only process or have processed the data in third countries with a recognised level of data protection, a contractual obligation through so-called EU standard protection clauses, in the case of certifications or binding internal data protection regulations in accordance with Art. 44 - 49 GDPR.
Storage duration
Regarding the storage duration of collected data, you will find more information about the individual offers. Insofar as continued storage is required for legal reasons, we will restrict your data until the expiration of these retention periods for further use and delete them as the deadlines expire.
Obligation to provide personal data
We will specify if we are under any obligation to provide personal data to third parties like public authorities or other private entities.
Data collected
In this section, you will find a description of the personal data collected with regard to a specific processing activity.
Recipients / Category of recipients
In this section, you will find all recipients of the collected personal data with regard to a specific processing activity.
Data subject´s rights
In this section, you will find a description of data subject´s rights at processing activity of collected data. Concerning this, you will find more information about this individual setting and contact options of provided service.
Automated decision making and profiling
We will inform you in the context of this privacy policy if we use automated decision making procedures including profiling.
For this purpose, you will receive information about the logic involved, the scope and intended effects of such processing on the data subject.
3. Processing activities
In addition to the purely informative use of our website, we offer various other options that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service or respond to your request.
3.1 Informational use of this website
If you only use our website for informational purposes (if you do not register or otherwise provide us with information), we will only collect the personal data that your browser transmits to our server (server log file). To enable core functions such as page navigation and access to protected areas we use essential cookies. Without these cookies, the website cannot run properly. If you wish to view our website, we collect the following information that is technically necessary for us to display our website and to ensure its stability and safety.
Data collected
- IP address
- Date and time of the request
- Referrer URL (Website from which the request comes)
- Host name of accessing client
- Operating System and its interface
- Action performed
Objectives of the data processing
Global Organizational Integrity Institute GmbH uses the server log file to monitor the technical operation of this website. The functional cookies are required to make our online services available to you without restriction.
Legal Basis
The legal basis for the use of server log file and essential cookies is our legitimate interests according to Article 6 (1) (f) GDPR.
Recipients / Category of recipients
The recipient of the collected data is Global Organizational Integrity Institute GmbH and its affiliated companies.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
The storage period of the server log file is 14 days.
The storage period of functional cookies is 24 days.
Data subjects’ rights specific to this processing activity
If you don’t want cookies stored on your computer, you will be asked to disable the option in your browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this website.
3.2 Matomo (formerly Piwiki)
If you provided consent, the on-premise version of Matomo, a web analytics service is used on this website. Matomo is provided by InnoCraft Ltd. 150 Willis St., 6011 Wellington, New Zealand (“Matomo”).
By using Matomo it is possible to assign data, sessions, and interactions across multiple devices to a pseudonymous User-ID and thus analyze the activities of a user across devices.
We like to point out that on this website Matomo has been extended by an IP-anonymization to ensure an anonymized collection of IP-addresses (so-called IP-Masking). The IP address transmitted by your browser when using Matomo isn't combined with other data.
More information on terms of use and data protection can be found at: matomo.org/privacy/
Data collected
- IP address (anonymous)
- Pseudo-anonymous site (based on the anonymized IP address)
- Date and time oft the request
- Title oft he called page
- URL oft he called page
- Screen resolution
- Referrer URL (Website from which the request comes)
- Files that were clicked and downloaded
- External links
- Duration oft he page setup
- Country, region, city (with low accuracy due to IP anonymization)
- Interaction with forms (but not their content)
- Browser typ, plugins und browser version
- Language and version oft he browser software
- Lokal time
- Time Zone difference to Greenwich Mean Time (GMT)
- Duration of stay on the website
Objectives of the data processing
Die Global Organizational Integrity Institute GmbH will use this information to evaluate your use of the website and to compile reports on website activity.
Legal Basis
The legal basis for the use of the Matomo tool is our legitimate interests according to Article 6 (1) (f) GDPR.
Recipients / Category of recipients
The recipient of the data is the Global Organizational Integrity Institute GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
The data sent by us and linked to cookies, user IDs or advertising IDs are stored for a maximum of 14 months. Data whose retention period has been reached is automatically deleted once a month.
Data subjects’ rights specific to this processing activity
You can withdraw your consent at any time with effect for the future by changing settings in your browser software. However, please be informed of the fact that in this case you might not be able to fully use all the functions of this website.
You can find further information here: www.youronlinechoices.com/de/
3.2 YouTube
We use the provider YouTube for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Goggle Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. On some of our websites we use plugins of the provider YouTube LLC. If you call up the Internet pages provided with such a plugin, a connection is made to the YouTube servers and the plugin is displayed. This will be transmitted to the YouTube server, which of our websites you have visited. If you are logged in as a member of YouTube, YouTube LLC assigns this information to your personal user account. When using the plugin such, clicking on the start button of a video also assigns this information to your user account.
For more information about data processing and privacy by YouTube LLC (Google LLC), see www.google.de/intl/de/policies/privacy /.
Objectives of the data processing
The purpose of the processing is the provision of video data within our online presence.
Legal Basis
The legal basis for the use of the social media links is your consent pursuant to Article 6 (1) (a) GDPR.
Recipients / Category of recipients
The recipient of the data is the YouTube LLC (Google LLC).
Transmission to third countries
The personal data will be transferred on servers in the USA for storage.
Storage duration
The data sent to Google and linked to cookies, user IDs or advertising IDs are stored for a maximum of 14 months and will automatically deleted after.
Data subjects’ rights specific to this processing activity
You can prevent this exchange by logging out of your Google user account (e.g. YouTube, Google+, Google) before using our website and deleting the corresponding cookies from YouTube LLC. Users have the option of rejecting this data exchange if necessary by changing the settings of their user account in the settings of their YouTube account.
You can withdraw your consent at any time with effect for the future by changing settings in your browser software. However, please be informed of the fact that in this case you might not be able to fully use all the functions of this website.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) from processing this data by downloading and installing this browser add-on .
You can find further information here: https://www.youronlinechoices.com/de/
3.3 Social Media Links (LinkedIn, YouTube)
This website uses links on social media platforms of the following services:
- „LinkedIn“, operated by: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
- „YouTube“, operated by: YouTube, LLC., 901 Cherry Ave., San Brunco, CA 94066, USA
The link to LinkedIn can be recognized by the LinkedIn icon (white “in”-letter) on the corresponding button. The link to YouTube can be recognized by the YouTube icon (video) on the corresponding button. By clicking on one of these buttons, you agree to the use of this link and thus the transfer of personal data to the respective social media website. We have no influence on the type and extent of the transferred data and their further processing. According to our current state of knowledge, information about your IP address and the link of the directing website is handed over to the respective social media service. Users get the option to refuse such data exchange by changing their user account settings on the website of the respective social media service. If you logged in on the corresponding social media service platform, the information can directly assign to your user profile. If you like to avoid such a collection of profile information, you need to log out from your respective social media service profile.
Further information from LinkedIn about the so-called data usage guidelines can be found at: www.linkedin.com/legal/privacy-policy
Further information from YouTube about the so-called data usage guidelines can be found at:
www.google.de/intl/de/policies/privacy
Objectives of the data processing
The purpose of the processing is the active communication with our customers and interested parties via presence on social networks.
Legal Basis
The legal basis for the use of the social media links is your consent pursuant to Article 6 (1) (a) GDPR. This consent is given by using the buttons provided.
Recipients / Category of recipients
The recipient of the data, when using the LinkedIn button is LinkedIn Ireland Unlimited Company.
The recipient of the data, when using the YouTube button is Google LLC.
Transmission to third countries
The personal data will be transferred on servers in the USA for storage.
Storage duration
LinkedIn: The IP sent to LinkedIn and linked to cookies, user IDs or advertising IDs are shorted stored for a maximum of two years. If you´re logged in with your account, your personal data will be deleted at the latest when the account is deleted.
YouTube: The data sent by us to Google and linked to cookies, user IDs (e.g., user ID), or advertising IDs are automatically deleted after 14 months.
Data subjects’ rights specific to this processing activity
You can prevent this exchange by logging out of your social media user account (Facebook, Xing, Twitter, Google) before using our website and deleting the corresponding cookies of the social media providers.
Users have the option of rejecting this data exchange if necessary by changing the settings of their user account in the settings of their social media service (LinkedIn, YouTube).
You can find further information here: https://www.youronlinechoices.com/de/
3.4 My Fonts Webfonts Kit
This site uses web fonts provided by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA, for the uniform display of design.
When you view a page, your browser loads the required web fonts into its cache to display text and fonts correctly. To prevent Monotype Imaging Holdings Inc. from knowing that your IP address was used to access our website, the web fonts have been installed on our server and your browser retrieves them from our server. For this purpose, the browser you are using must connect to our server. Monotype Imaging Holdings Inc. is not aware that your IP address has been used to access our Website.
For more information on the handling of user data, please refer to the Privacy Policy for Tracking Web Fonts of Monotyp Imaging Holdings Inc: https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-zum-tracking-von-webschriften
Objectives of the data processing
The objective is the processing of uniform and attractive presentation of content within our online presence.
Legal Basis
The legal basis for the use of web fonts is our legitimate interests according to Article 6 (1) (f) GDPR.
Recipients / Category of recipients
The recipient of the collected data is Global Organizational Integrity Institute GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
No personal data is stored by us.
Data subjects’ rights specific to this processing activity
For further questions regarding data processing, please contact the person responsible for data processing:
Global Organizational Integrity Institute GmbH
3.5 Application
You can apply for advertised positions on our website via your e-mail program (https://goii.de/bewerbung ).
By transferring the application to us, applicants agree to the processing of their data for the the application procedure under this privacy policy.
Please note that e-mails are generally not sent in encrypted form and that the applicants themselves must ensure that they are encrypted. We can therefore not take responsibility for the transmission path of the application between the sender and the reception on our server and recommend using rather the postal dispatch.
You will find further information at our Privacy Notice for candidates
Objectives of the data processing
We will only use the data entered in the application process.
If special categories of personal data within the meaning of Article 9 (1) GDPR are voluntairily provided within the application procedure, they will processed under Article 9 (2) (b) GDPR (e.g. health data, such as severely disabled status or ethnic origin).
Legal Basis
The legal basis for the processing of the applicant data is the fulfilment of contractual measures within the meaning of Article 6 (1) (b) GDPR and Article 6 (1) (f) GDPR it the data processing becomes necessary for us, e.g. within the context of legal proceedings (in Germany, § 26 BDSG applies additionally).
Recipients / Category of recipients
The recipient of the collected data is the Global Organizational Integrity Institute GmbH Application Team.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
In the case of a successful application, the data provided by the applicants can be further processed by us for the employment relationship. Otherwise, the applicants' data will be deleted. Applicant data will also deleted if an application is withdrawn.
The deletion will take place after 24 months , subject to a justified revocation by the applicants so that we can meet our obligation to provide evidence under the Equal Treatment Act.
Data subjects’ rights specific to this processing activity
For further questions regarding data storage, please contact the person responsible for data processing:
Global Organizational Integrity Institute GmbH
3.6 Contact form
Insofar as our customers send inquiries to us via the contact form provided on our website, (https://goii.de/kontakt ) only those personal data will be collected, which was provided within the scope of the inquiry.
Data collected
- First name (mandatory)
- Last name (mandatory)
- E-Mail (mandatory)
- Your Message (voluntary)
Objectives of the data processing'
The objectives of the data processing is to answer the request.
Legal Basis
The legal basis for the use of the contact form is your consent pursuant to Article 6 (1) (a) GDPR.
Recipients / Category of recipients
The recipient of the collected data is the Global Organizational Integrity Institute GmbH Team.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
If you have not consented to further use, we will delete your data after answering your request.
Data subjects’ rights specific to this processing activity
For further questions regarding data storage, please contact the person responsible for data processing:
Global Organizational Integrity Institute GmbH
3.7 Contact by e-mail, telephone or fax
Visitors of our website https://goii.org have several options to send us enquiries via their e-mail programme, by telephone or fax.
Please note that e-mails are generally not encrypted form and that our customers must ensure on their own. We can not take any responsibility for the transmission path of the inquiry between the sender and the reception on our server and therefore recommend rather to use the postal way.
Data collected
- E-Mail (mandatory by e-mail)
- Phone number (mandatory by phone)
- Fax number (mandatory by fax)
- Your Message (voluntary)
Objectives of the data processing
The objectives of the data processing is to answer the request.
Legal Basis
The legal basis for processing your contact request is your consent pursuant to Article 6 (1) (a) GDPR.
Recipients / Category of recipients
The recipient of the collected data is the Global Organizational Integrity Institute GmbH Team.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
If you have not consented to further use, we will delete your data after answering your request.
Data subjects’ rights specific to this processing activity
For further questions regarding data storage, please contact the person responsible for data processing:
Global Organizational Integrity Institute GmbH
4. SSL or TLS encryption
This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or. TLS encryption. An encrypted connection is indicated by the browser's address bar changing from "http: //" to "https: //" and the lock icon in your browser bar. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
5. Rights of the data subject
You have the following rights with respect to your personal data:
- Information and access right
- Rectification right,
- Erasure right,
- Right to restriction of processing,
- Right to object to the processing,
- Right to data portability.
In this case, please contact the person responsible for data processing:
Address: Global Organizational Integrity Institute GmbH, Bahnhofstraße 3, 82166 Gräfelfing, Germany
E-Mail: datenschutz(at)goii.org
6. Consent withdrawal or objection against the processing of your data
6.1 If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time with future effect. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.
6.2. Insofar we base the processing of your personal data on a legitimate interest, you may object to the processing. This is the case if, in particular, the processing is not required to fulfil a contract with you, which we describe in the following description of the functions. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.
6.3. You may object to the processing of your personal data for advertising and data analysis purposes at any time. About your advertising contradiction you can inform us under the following contact details: Global Organizational Integrity Institute GmbH, Bahnhofstraße 3, 82166 Gräfelfing, Germany, E-Mail datenschutz@goii.org, (see our imprint).
7. Right to lodge a complaint
You also have the right to lodge a complaint with the competent supervisory authority.
8. Modification of this Privacy Policy
Global Organizational Integrity Institute GmbH, reserves the right to change or to adapt this privacy policy at any time.
9. Picture credits
For the picture “A flock of wild geese flying on the sky“ #184763129 a license was purchased – origin: Adobe Systems Software Ireland Limited Copyright: DAWOOL
For the picture “Hand mit Kompass in der Natur“ #2851627 a license was purchased – origin: Photocase Addicts GmbH Copyright: Addictive Stock
For the picture “Website banner, Investment dashboard. Diagram Graph Stock Trading transparent business background“ #305848124 a license was purchased – origin: Adobe Systems Software Ireland Limited Copyright: Funtap
For the picture “Handshaking business person in office with network effect, concept of teamwork and partnership, double exposure“ #200971509 a license was purchased – origin: Adobe Systems Software Ireland Limited Copyright: alphaspirit
For the picture “Group of business people collaborating in office“ #301930446 a license was purchased – origin: Adobe Systems Software Ireland Limited Copyright: NDABCREATIVITY
For the picture “Business speaker giving a talk at business conference event“ #221477155 a license was purchased – origin: Adobe Systems Software Ireland Limited Copyright: Matej Kastelic
For the picture “Abstract human network connection in geometric line“ #220488343 a license was purchased – origin: Adobe Systems Software Ireland Limited Copyright: Belkin & Co
All other image rights according to § 15 UrhG and § 19 (a) UrhG to the graphics used are owned by Global Organizational Integrity Institute GmbH.