Privacy Information Data Processing on the igmetall.de Websites

We at IG Metall appreciate your interest in our work and our website. Since the protection of your personal data is important to us, we provide you with information here about how we handle your personal data. Personal data refers to any data that can be linked to you personally, such as your name, address, and email address.

Every time you visit our website, our system automatically collects data and information from the computer system of the device used to access the site. The following data is collected:

(1) Information about the browser type and version used

(2) The user’s operating system

(3) The user’s IP address

(4) Date and time of access

(5) Websites from which the user’s system accessed our website

(6) Websites accessed by the user’s system via our website

This data is also stored in our system’s log files. This data is not stored together with any other personal data of the user.

The legal basis for the temporary storage of the data and the log files is Article 6(1)(f) of the GDPR.

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to provide the website, this occurs when the respective session ends.

The data is stored in log files to ensure the website functions properly. In addition, we use the data to optimize the website and to ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

In the case of data stored in log files, this occurs after 30 days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymized so that the client making the request can no longer be identified.

Since the collection of data for the provision of the website and the storage of data in log files are absolutely necessary for the operation of the website, the user has no right to object.

Our website uses cookies. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that enables the browser to be uniquely identified when the website is visited again. The cookies are deleted once the web session ends (transient or temporary cookies).

The use of cookies can be prevented or restricted through appropriate browser settings. However, this may result in the settings of this website no longer being displayed correctly.

We use cookies to make our website more user-friendly. These cookies are technically necessary and are deleted once the web session ends. Some elements of our website require that the browser used to access the site can be identified even after a page change.

The legal basis for processing personal data using cookies is Article 6(1)(f) of the GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.

Cookies are stored on the user’s computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

Advertising

We use cookies and similar technologies for marketing purposes to target our users with interest-based advertising, limit the likelihood of an ad being displayed, and measure the effectiveness of our advertising campaigns. This information may also be shared with third-party providers. Details on the individual services can be found in the following sections.

Google Ads, Remarketing, and Conversion Tracking

We use the Google Ads service. Google Ads is an online advertising program provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

This means we run Google Ads campaigns and, as part of this, also use Google Remarketing and Conversion Tracking. The ads are displayed on websites within the Google Display Network based on search queries. In addition, we use Ads remarketing lists for search ads. This allows us to tailor search ad campaigns to users who have previously visited our website. Through these services, we can combine our ads with specific search terms or display ads to previous visitors that promote, for example, services they viewed on our website. This allows us to display interest-based ads to users of our website on other websites within the Google Advertising Network (as “Google Ads” within Google Search or on other websites).

Interest-based advertising requires an analysis of online user behavior. Google uses cookies to perform this analysis. When a user clicks on an ad or visits our website, Google sets a cookie on the user’s computer. These cookies expire after 90 days. The information collected via these cookies is used to target the visitor with relevant ads during a subsequent search query. Further information on the cookie technology used can also be found in Google’s information on website statistics and in its privacy policy. With the help of this technology, Google and we, as a client, receive information indicating that a user has clicked on an ad and been redirected to our websites. The information obtained in this process is used exclusively for statistical analysis to optimize advertising. We do not receive any information that can be used to personally identify visitors.

As part of this service, your IP address is generally also transmitted to Google’s servers. However, we receive only statistical reports from Google and no information that can be used to personally identify visitors.

The statistics provided to us by Google include the total number of users who clicked on one of our ads and, where applicable, whether they were redirected to a page on our website that is tagged with a conversion tag. Based on these statistics, we can determine which search terms resulted in our ad being clicked particularly often and which ads led users to contact us via the contact form.

To the extent that data is processed outside the European Economic Area (EEA) or the EU, where data protection standards do not meet European standards, Google states that it uses standard contractual clauses.
For more information on data protection in connection with Google Ads, please visit:https://policies.google.com/technologies/ads?hl=de

Data collection and storage take place in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only if you have given us your consent by selecting the option in our consent banner. If you have not given your consent, no data processing will take place.

You may revoke your consent at any time in accordance with Article 7(3) of the GDPR and without providing a reason, with future effect, by clicking the “Cookie Settings” button located at the bottom left of our website to open the consent banner. You can then make a new selection using the banner.

Meta Pixel (Facebook Pixel) 

Our website uses the so-called “Meta Pixel” (also known as the Facebook Pixel) provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

This is a code that we have implemented on our website. When you visit our website, this code establishes a connection with Meta’s servers to track your behavior on our website.

Among other things, the Meta Pixel collects the following personal data:

Your IP address

Device information (device ID, device type, and the operating system you are using)

Meta uses this personal data to identify visitors to our website, associate their actions with a Meta user account, display personalized ads, and create interest-based user profiles. We are not necessarily able to track the specific data processing operations or their scope. The collected data remains anonymous and inaccessible to us and is only usable by us for the purpose of measuring the effectiveness of ad placements.

The Meta Pixel is used in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG only if you have given us your consent via the selection in our consent banner. If you have not given your consent, no data processing will take place.

You may revoke your consent at any time in accordance with Article 7(3) of the GDPR and without providing a reason, with future effect, by clicking the “Cookie Settings” button located at the bottom left of our website to open the consent banner. You can then make a new selection via the banner.

We cannot rule out the possibility that personal data may be transferred to servers operated by Meta Platforms Inc. in the United States. However, Meta Platforms Inc. is certified under the EU-U.S. Data Privacy Framework, which, according to a decision by the European Commission, ensures an adequate level of data protection. In addition, Meta uses standard contractual clauses.

For details on the collection and storage of your personal data, as well as the nature, scope, and purpose of its use by the Meta Pixel, please refer to Meta’s Privacy Policy.

This website uses features from Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By integrating Google Maps, IG Metall aims to help you find us. In doing so, Google receives information about your location or starting address, as well as your device’s IP address and the fact that Google Maps was accessed from this website.

Finally, Google may place cookies on your computer. If you are logged into your Google account at the same time, the data listed above may be linked to your Google profile. You can find Google’s privacy policyhere.

The legal basis for the processing of your personal data is the consent you provided via the cookie banner pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent to the processing of your personal data at any time by clicking thislink.

Withdrawing your consent does not affect the lawfulness of the processing of your data that took place on the basis of your consent prior to its withdrawal.

We are aware that your personal data is transferred to an unsafe third country without an adequate level of protection and have implemented appropriate safeguards in accordance with Article 46 of the GDPR to ensure the lawful and secure processing of your personal data.

To this end, we have entered into EU Standard Contractual Clauses with additional safeguards with the aforementioned provider. This is a contract required under data protection law that ensures the personal data of our website visitors is processed only in compliance with the GDPR. You can view the contract we have entered into with the provider at the following link:EU Standard Contractual Clauses with Google.

We use Spotify (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden) to use a podcast to inform employees, interested parties, and members about IG Metall news regarding current topics, IG Metall campaigns, etc. Furthermore, topics of interest to members, employees, and non-members in connection with IG Metall’s activities may be discussed. The published podcasts can also be listened to by unregistered users. If you are logged in, you can share, save, and perform other actions with the podcasts.

Clicking on the Spotify logo takes you to IG Metall’s profile on the Spotify website.
When you click on the Spotify logo, your IP address, the type of browser you are using, and the URL of the website you visited—on which the link is embedded—are collected and transmitted to Spotify.
This processing of your personal data is based on our legitimate interests in publicly presenting our union in accordance with Article 6(1)(f) of the GDPR.

IG Metall has no control over how Spotify uses this data; therefore, please contact Spotify directly for more information and adjust your privacy settings there.

It is possible that, in the course of using Spotify, personal data may be transferred to a non-EU country (including the U.S.); in this case, Spotify ensures compliance with EU data protection standards through EU Standard Contractual Clauses.
For more information on data processing by Spotify, particularly regarding the retention period for your data, please visit: Privacy Policy - Spotify

IG Metall regularly sends out a series of newsletters and information to interested parties, members, and officials.

1. You can subscribe to some of these newsletters on the website.

When you subscribe to the newsletter, the data entered in the form is transmitted to us. This includes:

• First Name
• Last Name
• Email address

Providing the user’s email address is necessary to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address provided.

The data is used exclusively for sending the newsletter.
The legal basis for processing is Article 6(1)(a) of the GDPR.
The collected data is stored for as long as the newsletter subscription remains active. The user may cancel the newsletter subscription at any time.

1. In addition, members and officers regularly receive information about the organization’s latest developments in the form of newsletters.

Since we are interested in how our information is received, we store usage data in anonymized form and analyze it. This provides us with statistical data on whether and how the information is used.
We do this on the basis of a legitimate interest. The legal basis for this is Article 6(1)(f) of the GDPR.

You can unsubscribe from the newsletter and related information at any time by clicking the corresponding link at the end of the newsletter.

Our website features a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the form is transmitted to us and stored. This data may include:

• Last Name
• First Name
• Street
• ZIP
• City
• Company
• Email
• Member Number
• Message

The date and time of submission are stored when the message is sent:

Your consent is obtained for the processing of the data as part of the submission process, and reference is made to this Privacy Policy. Alternatively, you may contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored. In this context, the data will not be disclosed to third parties. The data is used exclusively for the purpose of handling the correspondence. The legal basis for processing the data, provided the user has given consent, is Article 6(1)(a) of the GDPR. The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the email contact is intended to lead to the conclusion of a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. We process the personal data from the contact form solely to handle the inquiry. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form’s input fields and data sent via email, this is the case once the respective conversation with the user has ended.

The conversation is considered concluded when the circumstances indicate that the matter in question has been definitively resolved. The personal data additionally collected during the submission process will be deleted no later than 30 days after submission. The user may revoke their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

Withdrawal of consent is effected by sending a message to the email address datenschutz@igmetall.de. In this case, all personal data stored in the course of the contact will be deleted.

a. Privacy Policy for the Use of Facebook Plugins

This website uses plugins from the social network Facebook.

Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA

You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site.

When you visit this page, the plugin establishes a direct connection between your browser and the Facebook server. As a result, Facebook receives the information that you have visited our site using your IP address. You can find more information here: https://www.facebook.com/help/186325668085084.
You can find information about all Facebook plugins via the following link: https://developers.facebook.com/docs/plugins/

If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Facebook. For more information, please see Facebook’s Privacy Policy.

Facebook Inc. complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

b. Privacy Policy for Flockler Users

To display images on our website, we use the Flockler service, provided by Flockler Oy, Rautatienkatu 26 B 32, 33100, Tampere, Finland, which creates social media walls from photos uploaded or collected from relevant social media channels and displays them on our website.

Interacting with the respective content establishes a connection to Flockler’s servers. In addition, Flockler obtains your IP address. This applies even if you are not logged in to the respective social media provider or do not have an account with it. The websites you visit are linked to your social media account and disclosed to other users.

Data is also transferred to the social media provider in this process. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by the social media provider. For more information, please refer to the providers’ privacy policies.

The use of the Flockler plugin is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media.

The privacy policy and further information about this service provider can be found at: flockler.com/privacy-policy

When you register for the first time, you consent to the processing of your personal data or data that can be linked to you. Personal data includes all information that relates to you and, in particular, to your identity (such as your name and contact information).
The newsletter keeps you informed about IG Metall topics. Since we are also interested in how our information is received and whether and when it is read, we track the newsletter and store this data in anonymized form.
When you use the “Info Service,” the date and time of your login are stored.

When you subscribe to the newsletter, the following data is stored and used: 

Email address (for sending the newsletter)

Opening of the newsletter (anonymized)

Clicks on specific articles (anonymized)

Conversions (anonymized)

1. Categories of data, purposes for which personal data will be processed, and the legal basis for processing:

The data collected when you use the newsletter is used exclusively for the purposes described above.
The legal basis for the processing of your personal data or data that may relate to you is Article 6(1)(a) of the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), which permits processing based on your consent.

2. Disclosure to recipients or categories of recipients of personal data:

No data is transferred to third parties.

3. Duration of storage/criteria for determining the duration:

The email address will be stored for as long as the newsletter subscription remains active. The user may cancel the newsletter subscription at any time. A link for this purpose is included in every newsletter. 

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

a. Right of access

You may request confirmation from the controller as to whether we are processing personal data concerning you.

If such processing is taking place, you may request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(4) the planned duration of the storage of your personal data or, if specific details cannot be provided, the criteria used to determine the storage period;

(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restrict processing by the controller, or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) any available information regarding the origin of the data, if the personal data is not collected from the data subject;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and—at least in these cases—meaningful information about the logic involved, as well as the scope and intended effects of such processing on the data subject.

You have the right to request information regarding whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

b. Right to Rectification

You have the right to request that the controller rectify and/or complete the personal data concerning you if the processed personal data is inaccurate or incomplete. The controller must carry out the rectification without undue delay.

c. Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you for a period that allows the data controller to verify the accuracy of the personal data;

(2) the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of its use;

(3) the controller no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise, or defend legal claims; or

(4) if you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your interests.

If the processing of your personal data has been restricted, such data—apart from its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

If processing has been restricted in accordance with the above conditions, the controller will notify you before the restriction is lifted.

d. Right to erasure

a) Obligation to Erase

You may request that the controller erase the personal data concerning you without delay, and the controller is obligated to erase such data without delay if any of the following grounds apply:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.

(4) The personal data concerning you has been processed unlawfully.

(5) The erasure of the personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you was collected in connection with information society services offered pursuant to Article 8(1) of the GDPR.

b) Notification to Third Parties

If the controller has made the personal data concerning you public and is obligated to erase it pursuant to Article 17(1) of the GDPR, the controller shall, taking into account available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers who process the personal data that you, as the data subject, have requested the erasure of all links to such personal data or of copies or replicas of such personal data.

c) Exceptions

The right to erasure does not apply to the extent that the processing is necessary

(1) for the exercise of the right to freedom of expression and information;

(2) to comply with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, to the extent that the right referred to in subsection (a) is likely to render impossible or seriously impair the achievement of the objectives of such processing; or

(5) to assert, exercise, or defend legal claims.

e. Right to Information

If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about these recipients.

f. Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

(1) the processing is based on consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR, or on a contract pursuant to Art. 6(1)(b) of the GDPR, and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, to the extent that this is technically feasible. The freedoms and rights of other individuals must not be infringed upon as a result.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

g. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

h. Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

i. Right to lodge a complaint with a supervisory authority

Without prejudice to any other judicial remedy, you have the right to lodge a complaint with a supervisory authority—in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement—if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

The address of the supervisory authority responsible for IG Metall is:

The Hessian Data Protection Commissioner
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Tel.: 0611 1408-0