Privacy Policy
Realport

General

Personal data is processed in the operation of this website and the use of services offered through this website (“Website”) by Realport Services GmbH or one of the Realport Group affiliates (“Realport” or “we”). This Privacy Policy is intended to inform you, as a visitor to the Website and to users of Realport services, about the nature, scope and purpose of the collection and processing of personal data.  

The terms used in this Privacy Policy (e.g. “personal data”, “processing”, “pseudonym” or “anonymization”) are in line with the definitions included in the General Data Protection Regulation (“GDPR”).

The controller of the personal data is the Website operator:
Realport Services GmbH  
Lennéstraße 5  
10785 Berlin
Germany

Our Data Protection Officer is Intelliant GmbH, located in Berlin, Germany. You can reach our Data Protection Officer at any time writing to [email protected].

Data Processing

The type, scope and purpose of the processing of personal data depend on which Realport services are used. We will process specific personal data required for each particular service and depending on the respective group of data subjects (e.g. customers, Website visitors).

Website Services

The data subjects with regards to the services provided through the Realport website are all Website visitors.

Provision of the Website

In order to make the Website available, to enable basic functions and trouble-free operation, it is technically necessary to process personal data. Although these are basically device data, with this data it may possible to link them to the visitors. For example, the IP addresses of the used terminals, identifiers of the used terminals, the operating systems and the browser are processed solely in order to establish a connection between the terminal and the server hosting the Website and to display the contents in the intended layout. We use the so-called web fonts for the uniform presentation of fonts. These web fonts are provided by Google Fonts, a service of Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, “Google” or “Google Fonts”).  

When a page is requested, the visitor’s browser loads the required web font into the visitor’s browser cache to display the texts and fonts correctly.  

In order to do this, your browser must connect to the Google servers. This will notify Google that the Website was accessed via your IP address. The use of Google Fonts is used as per our interest of a uniform and attractive display of our online services. The use of Google Fonts is in the interest of a uniform and attractive presentation of our online services. If your browser does not support web fonts, a default font will be used instead. The legal basis for the processing is article 6.1 (f) GDPR (legitimate interest).  

Security of the Website

In order to ensure the security of the Website, the data is processed by accessing the Website as server log files. Although these are basically device data, with this data may possibly be made the reference to the Website visitors. These data are matched against existing attack vectors and evaluated when detected attacks.  

Data stored in the server log files includes previously visited websites, date and time of the access, the amount of data sent in bytes, the URL of the previously visited website, the internet browser and the operating system used.  

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the server log files, the maximum storage period is 7 days. If data needs to be retained for evidence, it will be exempted until the incident is finally resolved.  

The legal basis for the processing is article 6.1 (f) GDPR (legitimate interest).

Range Measurement & Optimization of Our Offer

This Website uses cookies for range measurement and optimization of our offer. The cookies are transmitted either from us or from third-party servers to the visitor's browser.  

As a result, a recognition of the used device is potentially possible. The data of the visitor which is collected through the use of cookies is pseudonymized. Thus, the connection between the collected data and a data subject is no longer possible, neither for us nor for third parties. The data will not be collected together with other data of the visitor. In some cases, the data is anonymized before use, so that the conclusion on the visitors is altogether impossible.  

These cookies are only set once you have given us your consent. To grant your consent, we will provide you with a communication field at the beginning of the visit to the Website. The legal basis for the processing of data using cookies is article 6.1 paragraph (a) GDPR (consent).  

Any given consent can be revoked at any time with future effect in the cookie settings on our Website. The cookie settings can be found under “Manage Cookie Preferences” on the Website. The set cookies will be deleted.

Consent Management

To administer and implement your consent on our Website, we use the consent management solution Termly.io by Termly LLC (500 Yale Ave N., Seattle, WA 98109, “Termly”).
 
Termly enables us to collect, manage and document the consent of our visitor for data processing and the use of individual third-party services and various web technologies on the Website.  

The legal basis for the processing is article 6.1 (c) GDPR (compliance with legal obligations). The following third-party providers are used. The following information is relevant to you only if you have given the appropriate consent:

Google Services

We use the services Google Analytics and the Google Tag Manager. These are services provided by Google. Google is based in the third country USA, which basically lacks an EU level of protection. However, EU Standard Contractual Clauses are completed with Google, ensuring a transfer of the data with appropriate safeguards in accordance with article 46 GDPR.You can find more information in the  Privacy Policy of Google .

Google Analytics

Google Analytics uses cookies. The data collected with the cookies is usually sent to a Google server in the USA, where it is stored.  

On this Website the IP address is anonymized and shortened. Only in certain individual cases the full IP addressed is transmitted to the servers in the USA and shortened there. This shortening of the IP address eliminates the personal reference to the IP address of the visitor.  

In accordance with the terms of the agreement we have entered with Google, Google uses the collected data to compile an evaluation of the use of the Website and the Website activity across multiple devices and sessions, and provides related services. The data collected by Google on behalf of us are used to evaluate the use of the online offer by the individual visitors, e.g. to generate activity reports on the Website in order to improve the online offer.  

Thus, in case of your consent, the cookies stored in your internet browser will be completely deleted after a maximum period of 90 days.  

Google Tag Manager

Google Tag Manager manages Google Analytics tracking (see above). Google Tag Manager itself does not collect personally identifiable information.

Communication Services


Contact Form and Mailing List


To learn more about Realport and to receive more detailed information about Realport’s services, the contact form on the Website can be used to sign up for the mailing list. The mailing list is a separate, free information service that can be used independently of any existing customer relationship.

By submitting the contact form, the subscriber consents to be contacted by us via e-mail with more information regarding Realport and its services.

As this information is distributed through the mailing list, we require the following information of the subscriber:

  • e-mail address in order to contact the subscriber,  
  • name and last name to be able to address the subscriber personally and avoid abuse
    information on the type of investor represented by the subscriber to determine the relevant services

  • The data subjects with regards to the mailing list are the subscribers.  


After submitting the contact form, the subscriber will receive an e-mail. This e-mail has a link with which the subscriber must confirm the registration to the mailing list. We can provide further information on our services only after the conformation has taken place (double opt-in).

The subscriber can unsubscribe from the mailing list and therefore withdraw the consent at any time. Each mailing contains information to unsubscribe from the mailing list with future effects. Alternatively, the request to unsubscribe can be sent via e-mail at any time.

The legal basis for the processing is article 6.1 (a) GDPR (consent).

For the distribution, management and statistics of the contact form, as well as the mailing list we are using Mailchimp (see below).

MailChimp  

We use Mailchimp, a service provided by The Rocket Science Group LLC d/b/a MailChimp (675 Ponce de Leon Ave. NE, Suite 5000, Atlanta, GA, 30308, USA, “MailChimp”), for the provision, administration and distribution of our contact form and mailing list. Mailchimp is based in the third country USA, which basically lacks an EU level of protection. EU Standard Contractual Clauses are completed with Mailchimp, ensuring a transfer of the data with appropriate safeguards in accordance with article 46 GDPR.

This service enables us to internally manage a database of the e-mail addresses to communicate with subscribers. The service also manages data regarding when an e-mail was read by a subscriber and when a subscriber interacted with the incoming e-mail, for example by clicking on the links included in such e-mail. This is done by using the so-called web beacons, also known as tracking pixels. Tracking pixels are small image files that allow us to evaluate user behavior.  

MailChimp transmits personal data to external service providers in order to offer its services.  

You can object to this tracking at any time by unsubscribing from the mailing list as described above. In the event that you de-activate the display of images in your e-mail program by default, the evaluation by MailChimp described above is not possible. In this case, the mailing list will not be fully displayed, and you will not be able to take advantage of all its features.

Services for Registered Users

The data subjects with regards to the services we offer for registered users are our customers. Between entering and completing the registration process, data subjects are considered potential customers.

Application Process – Realport career page

The data subjects with regards to the application process at Realport are all applicants and candidates for positions at Realport.

For the recruitment process we use the services of  Personio GmbH (Rundfunkplatz 4, 80335 München, Germany, "Personio"). Personio is a webservice implemented in the Realport career page. By submitting your application through the form on the career page, the entered personal data and uploaded documents are transmitted to Personio. Personio rovides the career portal, where all applicant data can be stored, administered, and deleted according to data protection and security requirements. The collection and processing of your personal data for the recruitment as well as the transmission to Personio is necessary to take steps at your request prior to entering into a contract, art. 6.1 (b) GDPR. Furthermore, it is Realport’s legitimate interest to facilitate recruitment and to ensure the data privacy by encrypted processing, art. 6.1 (f) GDPR.

We kindly ask for your understanding that due to data privacy reasons we cannot process applications received outside of Personio.

Personal data of job applicants

If you apply for a position at Realport, we process your personal data to facilitate the entire job application procedure on the legal grounds of art. 6.1 (b) and (f) GDPR. After the procedure we will delete your personal data as soon as possible, unless we have informed you that we require it for other purposes.

The following categories of personal data can be processed for the job application procedure:

  • Any personal data that you provide through our job application form including, but not limited to: Full name, email address, phone number, location, resume/CV, cover letter, picture, degree, educational data LinkedIn profile, visa information
  • Statuses, notes and planning related to your job application, and
  • Email communications.

We will store the application including the provided personal data in the recruitment process for a period of 6 months after the hiring decision for preventive reasons.

Under European data protection law, we are required to inform you that withholding personal data in your job application can give you a disadvantage in comparison to other candidates who are applying for the same role.

Information regarding the controller of the data can be found in section 1 of this policy. Information on how to exercise the rights of data subjects can be found in section 7 of this policy.

Your Rights as Data Subjects

If your personal data is being processes, you are data subject as defined by GDPR. Consequently, you have the rights described in articles 15 to 21 GDPR in relation to the controller. In order to exercise your rights or to obtain further information on data protection regarding Realport, please contact our data protection officer by sending an e-mail to [email protected].

Right of Access

In accordance with article 15 GDPR you have the right to request confirmation from the controller as to whether your personal data is being processed. If this is the case, you also have the right to receive free information regarding all your personal data being processed by Realport and the right to receive a copy of such personal data.

Additionally, in accordance with article 19 GDPR you have the right to request the controller information regarding the recipients to whom your personal data has been forwarded to.

Right to Rectification

In accordance with article 15 GDPR you have the right to request the rectification for your personal data if it is either incorrect or incomplete.

Right to Erasure

If your request does not conflict with a legal obligation to retain data, you have the right to have your personal data deleted in accordance with article 17 GDPR. Your personal data stored with the controller will be deleted if such data is no longer needed for its intended purpose and is not subject to any statutory retention period. If the deletion cannot be carried out due to a legal obligation to retain such data, the processing of the personal data will be restricted, in which case the data shall be stored and not processed for any purpose. The deletion of your data implies that the services of Realport can no longer be used in full or not at all. We are obliged to delete personal data immediately if the processing is not required anymore, as well as for any of the following reasons:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • You have revoked your consent to processing and there is no other legal basis for processing;
  • You have objected to the processing pursuant to article 21(1) GDPR and there is no overriding legitimate basis for the processing, or you have objected to the processing pursuant to article 21(2) GDPR;
  • The personal data was processed unlawfully;
  • The deletion of your personal data is required to fulfill a legal obligation under German or European law.

If your request does not conflict with a legal obligation to retain data, you have the right to have your personal data deleted in accordance with article 17 GDPR. Your personal data stored with the controller will be deleted if such data is no longer needed for its intended purpose and is not subject to any statutory retention period. If the deletion cannot be carried out due to a legal obligation to retain such data, the processing of the personal data will be restricted, in which case the data shall be stored and not processed for any purpose. The deletion of your data implies that the services of Realport can no longer be used in full or not at all. We are obliged to delete personal data immediately if the processing is not required anymore, as well as for any of the following reasons:

Right to Restriction of Processing

In accordance with article 18 GDPR you have the right to request the controller to limit the processing of your personal data if one of the following conditions is met:

  • You have contested the accuracy of the personal data. In this case the processing is restricted for a period of time which enables the controller to verify the accuracy of your personal data;
  • The processing is unlawful, and you have opposed to the deletion of personal data and instead requested a restriction on the use of your personal data;
  • The controller no longer needs your personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of a legal claim;
  • You have objected to the processing under article 21 (1) GDPR and the verification of whether the legitimate bases of the controller override those of the data subject are still pending.

If the processing of personal data has been restricted in accordance with the conditions above, the processing of such data may only take place - with the exception of storage - with your consent or for the purpose of establishing, exercising or defending rights or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the processing is restricted, Realport will notify you before the restriction is lifted.

Data Portability

You have the right, in accordance with article 20 GDPR, to receive your personal data which you have made available to the controller, in a structured, common and machine-readable format. Additionally, you have the right to transfer your personal data by yourself or through us directly to another controller, as far as this is technically possible and the rights and freedoms of third parties are not affected.

Right to Object

In accordance with article 21 GDPR you have the right to object at any time to the processing of your personal data which is based on points (e) or (f) of article 6.1 GDPR. If you would like a correction, blocking, deletion or information regarding your personal data we store, or if you have questions regarding the collection, processing or use of your personal data, or if you wish to revoke your consent, please contact the data protection officer by sending an e-mail to: [email protected].

Revocation of your Consent

You have the right to revoke your consent to the processing of your personal data at any time. All you need to do is send an e-mail to [email protected].

Submitting a Complaint to the Supervisory Authority

Finally, in accordance with article 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for the controller:
Berliner Beauftragte für Datenschutz und Informationsfreiheit  

Friedrichstrasse 219
10969 Berlin, Germany
Telephone: 030 13889-0
E-mail: [email protected]
Internet: www.datenschutz-berlin.de

Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy from time to time, to the extent permitted by applicable law.  

Updated: February 2021.