Privacy

The most important thing first!
The protection of your personal data is very important to us. The provisions of the EU General Data Protection Regulation (GDPR) are consistently implemented, complied with, and continuously reviewed by us. Below you will find some related information.

 

1. Information on the Collection of Personal Data

(1) Below we provide information on the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, or user behavior.

(2) The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:

Creative Pro Europe GmbH

Stefan Kozák
Turmcenter Frankfurt

Eschersheimer Landstraße 14

D-60322 Frankfurt am Main

E-Mail: welcome@creativeproeurope.com

VAT identification number pursuant to Section 27a of the German Value Added Tax Act: DE XXX

Our external data protection officer can be contacted as follows:
Björn Wigforss
bjorn@creativepro.agency

 

For questions regarding data protection, please contact our data protection team at welcome@creativeproeurope.com or by mail at our postal address with the note “Data Protection Officer”.

(3) When you contact us by email, fax, or phone, the data you provide (your email address, and possibly your name and phone number) will be stored by us in order to answer your inquiries. We do not pass this data on without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested.
We delete the data arising in this context once the consent permitting processing is revoked, once storage is no longer required for the purpose, or once the purpose has ceased to exist. If statutory retention obligations apply, we restrict processing accordingly.

(4) If we use commissioned service providers for individual functions of our services, we will inform you in detail below about the respective processes and specify the criteria for the storage duration.

 

1. Your Rights

(1) You have the following rights with regard to your personal data:

Right of access

Right to rectification or erasure

Right to restriction of processing

Right to object to processing

Right to data portability

(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

The competent supervisory authority for data protection matters is:

Hessian Commissioner for Data Protection and Freedom of Information
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden

 

III. Collection of Personal Data When Visiting Our Website

(1) Log File Data

When using the website for informational purposes only, i.e. when you do not provide us with information in any other way, we or our hosting provider collect only the personal data that your browser transmits to our server. If you view our website, we collect the following data (so-called log file data), which is technically necessary to display the website and to ensure stability and security (legal basis: Art. 6(1)(f) GDPR):

IP address

Date and time of the request

Time zone difference to Greenwich Mean Time (GMT)

Content of the request (specific page)

Access status / HTTP status code

Amount of data transferred

Website from which the request originates

Websites accessed via the website

Information about browser type, language, and version

Operating system and its interface

These log file data are stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data that must be retained for evidentiary purposes are excluded from deletion until the respective incident has been fully clarified.

(2) Web Hosting

To host our website, we use web hosting services provided by Websupport, s.r.o.

Websupport, s.r.o. is located at Staré Grunty 12, 841 04 Bratislava, Slovakia.

The data collected via our website are therefore initially processed via Websupport servers. More information about data processing by Websupport can be found in their privacy policy.

Websupport may use infrastructure and technical measures necessary for secure and stable operation of hosting services, including network-level performance optimization and security protection mechanisms.

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in secure and efficient provision, stability, functionality, and performance of our website.

Websupport acts as our data processor. The corresponding data processing agreement is concluded in accordance with applicable data protection legislation.

(3) Cookies, Reach Analysis & Tracking

Our website does not use mechanisms that allow visitors to be recognized or tracked across websites or devices.

We only use so-called session cookies. These are small files stored on a device when a visitor accesses a website. They are necessary to provide certain content correctly and are deleted when the browser is closed.

If third-party content is linked on our website, cookies from third-party providers may be used when accessing such links, without us being able to explicitly inform you. Common browsers allow you to configure cookie processing, disable storage, or delete cookies.

(4) Use of Font Libraries

Our website uses font files from Google Fonts and Adobe Fonts. To display the website correctly, servers hosting these font files receive personal data such as browser information, network or device details, and your IP address.

This use is based on our legitimate interest in a uniform and visually appealing presentation with fast loading times (Art. 6(1)(f) GDPR).

As personal data may be transferred to the USA or other countries, Adobe and Google use EU-approved standard contractual clauses and the Privacy Shield framework to protect personal data.

Further information can be found in Adobe’s and Google’s respective privacy policies.
You can configure your browser to prevent fonts from loading from Adobe servers (e.g. via add-ons such as NoScript or Ghostery). If Adobe Fonts are blocked, system default fonts will be used instead.

 

1. Data Protection Information in the Application Process

If you apply for a position with us, either advertised or unsolicited, this is done by post or by email to welcome@creativeproeurope.com. Please note that emails are generally not encrypted, and applicants are responsible for encryption themselves. We therefore recommend postal submission.

Applicant data includes personal details, contact information, and application documents such as cover letter, CV, and certificates. Additional information may be provided voluntarily.

Applicant data are processed solely for the purpose of the application process in accordance with legal requirements.
The primary legal basis is § 26 of the German Federal Data Protection Act (BDSG).
Special categories of personal data (Art. 9 GDPR) are processed only where legally permitted.

If an application is successful, the data may be further processed for employment purposes. Otherwise, applicant data will be deleted, generally six months after rejection, unless consent for longer storage has been given (e.g. applicant pool for two years).

Travel expense reimbursements are archived in accordance with tax law requirements.

 

1. Protection of Minors

Children and persons under 18 years of age should not transmit personal data to us without parental consent. We do not knowingly collect or process data from minors.

 

1. Information on the Right to Object

If we process your personal data based on legitimate interests, you have the right to object at any time for reasons arising from your particular situation.
If you object, processing will cease unless compelling legitimate grounds exist or processing serves the assertion, exercise, or defense of legal claims.

If personal data are processed for direct marketing purposes, you may object at any time. Processing for such purposes will then cease.

 

VII. Security Measures

We implement appropriate technical and organizational measures pursuant to Art. 32 GDPR, taking into account the state of the art, costs, and risks, to ensure an appropriate level of data protection.
Measures include access control, data integrity, availability, and encrypted data transmission between your browser and our server, as well as procedures for exercising data subject rights and responding to data breaches.

 

VIII. Changes to This Privacy Policy

We reserve the right to amend this privacy policy from time to time to reflect current legal requirements or changes to our services. The updated privacy policy will apply upon your next visit.