I. Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

360 Nexus GmbH
Sachsendamm 4/5
10829 Berlin, Germany

Tel.:+49 30 12086620
Mail: info@360Operator.co
Website: https://360operator.com/

II. Contact details of the data protection officer

The data protection officer of the controller is:

DataCo GmbH
Nymphenburger Str. 86
80636 Munich
Germany
Tel.: +49 89 7400 45840
Website: www.dataguard.de

III. General information on data processing

On this page we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We will only collect, use or share your personal data where we have a legitimate purpose and legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how you can withdraw your consent, please refer to the subsections “Exercising your rights” in the following sections of this Privacy Policy.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) – We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps yourself before entering into this contract.

Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – We must use your data to comply with the law.

Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public task (Art. 6 para. 1 sentence 1 lit. e GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task defined by law, e.g. for a statutory function.

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not prevail.

Please note that we may not be able to provide you with our website if your data is processed in the performance of a contract or to comply with a legal obligation and you do not provide the requested data.

IV. Disclosure of your personal data and transfer to third countries

As explained in this Privacy Policy, we use various service providers to help us provide our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them.

We have concluded agreements with all service providers to whom we pass on your data, obliging them to protect your data.

If your personal data is transferred outside the EU, we will ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an adequate standard of data protection according to the European Commission, or by applying another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCC or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have in place with our service providers by sending an email to the email address provided in this Privacy Policy.

V. Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. the right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have a right to information about this data and to the following information:

Processing purposes
Categories of personal data
Recipients or categories of recipients
the planned storage period or the criteria for determining this period
the existence of the rights to rectification, erasure, restriction or objection
Right to lodge a complaint with the competent supervisory authority
If applicable, origin of the data (if collected from a third party)
if applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
If applicable, transfer of personal data to a third country or international organization

2. right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data.
In the event of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims, or
after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

4. right to erasure (“right to be forgotten”) (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand the immediate deletion of your personal data:

Your data are no longer necessary for the processing purposes for which they were originally collected.
you withdraw your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.
Your personal data is being processed unlawfully.
The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

To exercise the right to freedom of expression and information;
For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
For reasons of public interest in the area of public health.
For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.
for the assertion, exercise or defense of legal claims.

5. right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

6. right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

7. right to revoke the declaration of consent under data protection law (Art. 7 para. 3 GDPR)

If you have consented to the processing by the controller by means of a corresponding declaration, you can revoke your consent at any time for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by the revocation of the consent.

8. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

The data protection authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, telephone: 030/138 89-0, e-mail: mailbox@datenschutz-berlin.de, Homepage: https://www.datenschutz-berlin.de

VI. Provision of the website and creation of log files

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

Information about the browser type and version used
The user’s operating system
Date and time of access
Websites from which the user’s system accesses our website

This data is stored in the log files of our system.

This does not affect the user’s IP addresses or other data that enables the data to be assigned to a user. This data is not stored together with other personal data of the user.

This data is not stored together with other personal data of the user.

2. purpose of data processing

Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

3. legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

exercise your rights

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

VII. Use of cookies

1. description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.

Cookies are text files or information in a database that are stored on your hard disk and assigned to the browser you are using so that certain information can flow to the place that sets the cookie. Below we describe the type of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies:

Language settings
Your cookie settings (consent/refusal)
Search terms entered
Frequency of page views
Use of website functions

We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not only used for the functionality of the website, but also collect other data.

By setting technically unnecessary cookies, the following data is processed:

Location of Internet users
Date and time the website was accessed

2. purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

Technically unnecessary cookies are used to collect statistical data on the use of our website, to better understand the behavior of our users and to optimize our content and marketing measures.

3. legal basis for data processing

The legal basis for the processing of personal data using technically unnecessary cookies is Section 25 (1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Section 25 (2) TDDDG in conjunction with Art. 6 (1) lit. f GDPR. Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. exercise your rights

You can revoke your consent to the use of cookies at any time and manage your cookie settings using the button in the bottom right-hand section of the screen.

VIII. E-mail contact

1. description and scope of data processing

It is possible to contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the e-mail will be stored.

The data is used exclusively for processing the conversation.

2. purpose of data processing

The purpose of the processing of your personal data described above is to process the request transmitted with your communication and, if necessary, to contact you.

3. legal basis for data processing

The legal basis for the processing of the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to answer your request in the best possible way. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

5. exercise your rights

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

IX. Contact form

1. description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is stored at the time the message is sent:

E-mail address
First and last name
Your message
Date and time

2. purpose of data processing

The processing of personal data from the input mask of the contact form serves us solely to process the contact.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your request in the best possible way. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The statutory retention periods remain unaffected.

5. exercise your rights

If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time.

Please send an informal e-mail to . info@369operator.com

All personal data stored in the course of contacting us will be deleted in this case.

X. Company presence on LinkedIn

1. scope of data processing

We maintain a company presence on the following professional networks:

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as LinkedIn).

In order to make the third country transfer as data protection-friendly as possible, standard contractual clauses were concluded with LinkedIn in accordance with Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested by sending an informal email to . info@360operator.com

On our company page, we provide information and offer LinkedIn users the opportunity to communicate. If you perform an action on our LinkedIn company page (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, as we generally or largely have no influence on the processing of your personal data by LinkedIn, we cannot make any binding statements about the purpose and scope of the processing of your data.

You can find information on this in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

2. purpose of data processing

Our company website serves to inform users about our services. Every user is free to publish personal data through activities.

The company website is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company website. The company website is used for applications, information/PR and active sourcing.

3. legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest here is to respond to your inquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

4. duration of storage

The data generated by the company website is not stored in our own systems.

5. exercise your rights

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the “Your rights” section of this privacy policy. To do so, please send us an informal email to info@360operator.com.

Further information on exercising your rights can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy.

XI. Hosting

The website is hosted on servers of a service provider commissioned by us:

Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany

Further information on the processing of personal data by HostEurope can be found at: https://www.hosteurope.de/AGB/Datenschutzerklaerung/

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

Information about the browser type and version used
The user’s operating system
Date and time of access
Websites from which the user’s system accesses our website

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.

The website server is geographically located in Germany.

XII. Integrated third-party services

We use various service providers to provide the services we offer on the website.

In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for the provision of the basic service offered on the website in order to provide the relevant website service.

If such services are required for additional services, extended functions or additional purposes, your personal data will only be passed on to service providers if you give your consent.

Here you can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings.

Use of Google Analytics 4 (GA 4)

1. scope of the processing of personal data

We use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics / Google).

By using Google Analytics, we analyze the origin of visitors, the time they spend on individual pages and the use of search engines, among other things. This allows us to better monitor the success of advertising campaigns. It also enables us to evaluate the use of our online presence in order to compile reports on your activities and to use other Google services associated with the use of our online presence and the Internet.

Google places cookies on your end device. During the visit, user behavior is recorded in the form of “events”. This allows personal data to be stored and analyzed, including

First visit to the website
Interaction with the website, usage path
Clicks on external links
Video use
File downloads
Advertising impressions and clicks
Scroll behavior (if to end of page)
Searches on the website
Language selection
Page visits
Location (region)
Your IP address (in abbreviated form)
technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your Internet provider
Referrer URL

IP address anonymization is activated by default in GA 4. This means that your IP address will be truncated by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area. As an exception, only in rare cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser will not be merged with other Google data in the context of Google Analytics.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy

2. purpose of data processing

We use GA 4 to evaluate the use of our online presence and to generate reports on the activities on our website. The reports are used to analyze the performance of our website and to target advertising to people who have already shown an initial interest by visiting our website.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

4. duration of storage

Your personal data will be deleted after 14 months. This deletion takes place automatically once a month.

5. exercise your rights

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent via our Cookie Consent Tool

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/technologies/partner-sites

Use of WPML

1. scope of the processing of personal data

We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as: WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our online presence in different languages. When you visit our online presence, WPML stores a cookie on your device to save the language setting you have selected. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).
Further information on the processing of data by WPML can be found here:
https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

2. purpose of the data processing of personal data

The use of WPML enables us to display our online presence in multiple languages.

3. legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in addressing visitors to our online presence in their native language.

4. duration of storage

WPML stores cookies on your end device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance

5. exercise your rights

You can prevent the collection and processing of your personal data by WPML by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can find further information on objection and removal options vis-à-vis WPML at:

https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

Use of Google Tag Manager

1. scope of the processing of personal data

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). With Google Tag Manager, tags from Google and third-party services can be managed and embedded in a bundle on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/ and in Google’s privacy policy: https://policies.google.com/privacy:

2. purpose of data processing

The purpose of processing personal data is to collect and clearly manage and efficiently integrate the services of third-party providers.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively, according to .

5. revocation and removal option

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de:

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy

Changes to this privacy policy

We reserve the right to make changes to this privacy policy at any time. The privacy policy is updated regularly and all changes are automatically published on our website.

This privacy policy was created with the support of DataGuard.