Data privacy statement

Version 1.0 Effective Date: 25.08.2018

The following applies to the usage of our web site www.operator-agreements.com (“the Web site").

PreHCM is putting customer data protection and data security first. Access, storage and processing of your personal data is strictly performed under compliance with the applicable data protection regulations and provisions, especially the European General Data Protection Regulation (GDPR) EU 2016/679.

We access, store and process your personal data to offer you access to our Web site. This statement outlines how and why we use your personal data and explains your options regarding your personal data.

By using our Web site you agree with the collection, usage and transfer of your data according to the rules set out in this statement.

1. Data processor and controller

The data processor and controller with regard to the European General Data Protection Regulation (GDPR) EU) 2016/679 is

PreHCM Services GmbH

Rüttelweg 7

63843 Niedernberg

email: info@prehcmservices.de

phone: +49 93 71 91 81 00

For any questions regarding collection, processing and use of your personal data under this data protection statement please contact our data protection officer.

email: datenschutz@operator-agreements.com

phone: +49 93 71 91 81 007

He is also your contact person if you should require information, want to update or delete data, or to revoke a given consent.

2. General usage of our Web Site

2.1 Web Site Access data

When you visit our Web site we collect data from you. We collect, store and process data about access and usage of our Web site ( so-called server log files) such as requested URL, date and time of Web site access, data volume transferred, notification of successful access (HTTP response code), type and version of browser software used , referrer (URL of the previous page visited), IP address and requesting provider.

We do not use this data to create a mapping to a person nor do we generate a profile. The data is used as statistical data to operate, secure and optimize our web offer. Therefore, we analyse data traffic, trace and fix problems and improve our services. We reserve our right to analyse such data later if there are reasonable grounds for suspecting illegal use.

Access data will be stored and automatically deleted after 30 days.

In accordance with Article 17 (3)(e) of the European General Data Protection Regulation this data will additionally be kept on a central log server for the duration of 1 year for the establishment, exercise or defence of legal claims.

In certain cases, it is possible that we need to keep data for longer than 30 days In which case IP addresses of users are deleted or anonymised to make mapping to requesting clients impossible.

2.2 Electronic Mail (email)

If you get in contact with us (i.e. via contact form or via email) we will store your information to be able to reply and in case a follow up to your request should be required. Further personal data will be stored only with your consent or to the extent permitted by law.

2.3 User profile

In the user profile you can complete your personal profile with your personal data. The mandatory fields are restricted to “form of address”, name, surname and email. This data is necessary for the performance of a contract and remain on our data processing system until the end of the contractually defined membership duration.

2.4 Cookies

Web sites often use so-called cookies. Cookies do not cause harm to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective and more secure. Cookies are small text files stored on your computer by your web browser software.

We mostly use so called session-cookies. These cookies are automatically deleted at the end of a session. Other types of cookies remain on your computer until you manually delete them. We use these cookies to recognise your browser software during your next session.

You can specify in the security settings of your browser whether you want to be informed about storing cookies on your computer if you only want to accept cookies on a case by case basis if you prefer to generally refuse the usage of cookies or to automatically delete cookies by closing your browser session. Complete deactivation of cookies may impact functionality of our Web site.

3. Legal bases and storage period

The legal basis of data processing as outlined in previous chapters is Article 6 (1) (f) of the European General Data Protection Regulation (GDPR) EU 2016/679 . Our main interest is maintaining operation and security of our Web site and to simplify its use.

Unless not specifically stated we store personal data only for as long as necessary for fulfilling the purpose it was collected for.

4. Your rights as data subject

The applicable law grants you several rights regarding your personal data. To exercise these rights please contact the data protection officer via email or post and provide your explicit identification.

email: datenschutz@operator-agreements.com

phone: +49 93 71 91 81 007

You will find an overview of your rights below

You have the right to request information anytime and at no cost about:

• your personal data stored at PreHCM Services,
• their source and recipient
• the purpose of their storage and processing
• the right of rectification
• data transfer
• erasure and blocking of such data

5. Your right to revoke your consent to store and process your personal data

You have the right to revoke your given consent, having your personal data stored and processed by PreHCM, at any time.

6. Right to complain to Supervisory authority

You have the right to complain to the Supervisory authority in the member state of your abode, place of work or the place of a presumed infringement of your personal data.

7. Data security

We make maximum effort to care for the security of your data within the scope of current data security law and technical opportunities.

To transmit your personal data, we use encrypted transfer. We use the so-called SSL (Secure Socket Layer) encryption system. However, we point out that data transmission via internet (e.g. while communicating via email) may have security gaps. It is not possible to fully protect data from third-party access.

We use technical and organisational security measures and keep them state-of-the art.

We can’t guarantee that our offer is available at specific times. Technical faults, interruptions or outages cannot be ruled out. We regularly and meticulously create data backups from our servers.

8. Automated decision making

We do not perform automated decision making with regards to personal data we have collected.

9. Disclosure of personal data to third parties; no data transfer to non-EU countries

Basically, your personal data are only used within our company.

If and to the extent which to/for we involve third parties (e.g. logistics service provider) we only hand over personal data to the extent necessary to perform the specific service.

If we decide to outsource certain parts of data processing (job processing) the processor is contractually obliged to commit to only process personal data in accordance with the requirements of the applicable data protection laws and regulations and the protection of the data subject.

We do not and do not intend to transfer personal data to agencies, authorities or persons in non-EU countries, except cases pointed out in 2.3.

10. Data protection officer

In case of questions or concerns with regards to data protection you can contact our data protection officer via

email: datenschutz@operator-agreements.com

phone: +49 93 71 91 81 007