Privacy Policy
version: 1 date: 17.12.2024
Responsible Entity
We are pleased about your visit to our website. First, we would like to introduce ourselves as the responsible entity within the meaning of data protection law:
auronet GmbH represented by the managing director Michael Mücke Labbéstr. 18 41169 Mönchengladbach Phone: +49 (2166) 3 92 95 93 E-Mail: [email protected]
General Information
Just as we are interested in our data being carefully protected when using other services, this is also our most important task when providing PlainStaff. Without this protection, our service would be useless. In this document, in accordance with our statutory obligation, we would like to inform you about the collection, use, and protection of your personal data. When you use our website, personal data about you is collected. This can occur by you entering the data independently – such as your email address or a time booking in the app. However, our system also collects data from you automatically, such as your visit to our website. This occurs regardless of which device or software you use to access our website. Any entry of data by you on our website is voluntary; there are no disadvantages to you from not disclosing your data. However, without certain data, it is not possible for us to provide services or conclude contracts. We will notify you of such mandatory information in each case. On this website, personal data of the user is only collected within the scope of applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Art. 4 of the GDPR.
Inventory Data
We collect inventory data insofar as it is necessary for the establishment, content structuring, or modification of a (including gratuitous) contractual relationship between us and the user. This may include: customer data (e.g., name, address), contact data (e.g., email address, phone number), performance data (e.g., ordered service, term, fee). Upon establishing the user relationship, we will request this data from you (e.g., name, address, and email address) and also inform you of the extent to which the provision is mandatory in order to establish the user relationship.
Usage Data
Furthermore, we collect usage data to enable the use of services on our website by the user. This may include: usage data (e.g., accessed web pages or areas, duration of visit, interest in services), content data (e.g., data entered by you), and metadata (e.g., operating system, browser used, approximate location). We only merge usage data if and insofar as this is necessary for billing purposes or to fulfill our service. Otherwise, we only generate usage data pseudonymously and only insofar as you have not objected. You can send this objection at any time to the address indicated in the legal notice or to the responsible entity named in this privacy policy. The legal basis for this data processing is, on the one hand, our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in analyzing the website and its usage, and where applicable, also the statutory permission to store data in the context of initiating a contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR. Furthermore, our provider stores information with every use of this website, the so-called server log files, which are automatically transmitted by your browser. These are:
- Your IP address
- Type and version of your browser
- Host name
- Time of visit
- The website from which you visited our website
- Name of the accessed website
- Exact time of access as well as
- The amount of data transferred This data is used only for statistical purposes and does not allow us to identify you as a user.
Advertising
Prior to sending advertising, unless it involves advertising for similar products that you have already purchased, we will ask for your explicit consent in accordance with Art. 4 No. 11 GDPR. This occurs in particular when you give us consent to send our newsletter or fill out a contact form. You can revoke your consent at any time in accordance with the following section "Consent". INSOFAR AS WE USE YOUR PERSONAL DATA TO CONDUCT DIRECT MARKETING, YOU MAY LIKEWISE OBJECT TO THE USE OF YOUR DATA FOR THIS PURPOSE AT ANY TIME. THIS CAN BE DONE VIA ANY OF OUR CONTACT OPTIONS, IN PARTICULAR INFORMAL EMAIL TO THE EMAIL ADDRESS SPECIFIED IN THE LEGAL NOTICE. WE WILL THEN NO LONGER USE YOUR DATA FOR DIRECT MARKETING.
First Contact by Electronic Inquiry
If you contact us in electronic form (e.g., email, fax, telephone, messenger, etc.), we store and process the data that you have communicated to us (e.g., name, contact information, content of inquiry). The legal basis for this is our legitimate interest in effective customer communication pursuant to Art. 6 para. 1 lit. a GDPR and, insofar as it concerns an inquiry regarding entering into or fulfilling a contract, also Art. 6 para. 1 lit. b GDPR. We will only pass on this data to third parties insofar as it is necessary for the fulfillment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR), corresponds to the overriding interest in effective performance (pursuant to Art. 6 para. 1 lit. f GDPR), or your consent (pursuant to Art. 6 para. 1 lit. a GDPR) or another statutory permission or obligation exists. You can request information free of charge from us at any time regarding the purpose of processing, origin, and recipients of your personal data if applicable. Furthermore, you can assert rectification, deletion, and restriction of processing of your personal data. You can object to the (further) processing of your data at any time and have a right to data portability as well as a right to lodge a complaint with the competent supervisory authority. Your data generally remains stored only as long as the purpose of the respective data processing requires. Further storage comes into consideration primarily if this is still necessary for legal prosecution or legitimate interests, or if a statutory obligation exists to retain the data (e.g., tax retention periods, statute of limitations).
Consent
Insofar as we ask you for your consent to process your data, we will inform you in clear language and in an easily accessible manner about the cases for which you are granting your consent. Any consent requested by us is voluntary; any advantage that you wish to obtain by granting consent can also be obtained without consent, simply ask us. For every consent, you have the right to revoke consent granted to us for processing your personal data at any time. This can be done by informal notification, e.g., via our contact form, an email to the email address specified in the legal notice, or an unsubscribe link (if offered by us). Your revocation does not affect the lawfulness of the data processing carried out up to that point.
Storage Period
Your data generally remains stored only as long as the purpose of the respective data processing requires. Further storage comes into consideration primarily if this is still necessary for legal prosecution by us or for our other legitimate interests. For your inventory data required to fulfill a (including gratuitous) contractual relationship, this means that we store it until complete fulfillment or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) together with an appropriate surcharge for a possible interruption of the statute of limitations. For your usage data collected on the occasion of your use of the website, this means that we only store it for as long as is still necessary for the proper functioning of our website and as long as our legitimate interest extends. We will primarily store statistical data only in pseudonymized form. In addition, we store your data insofar as we are legally obligated to do so. These are in particular statutory tax retention periods, which generally amount to 6 or even 10 years.
Cookies
Within the scope of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6 para. 1 lit. f GDPR, our website uses cookies so that our offering can be used better, more effectively, and more securely. Cookies are text files that are stored on your computer and store certain data about your settings on our site. These can be so-called "session cookies", which are automatically deleted at the end of your visit to our website. However, there are also cookies that are permanently stored on your computer unless you delete them. It is then possible for us to recognize your settings the next time you visit our website and to provide you with functions corresponding to your previous usage.
Cookies of www.plainstaff.com
Our public information offering under the domains https://plainstaff.com and https://www.plainstaff.com presents the visitor upon their first visit with a modal dialog in which he or she can decide which cookies may be stored. Only after consent are the corresponding cookies created. These are the following:
| Cookie ID | Typ | Domain | Beschreibung |
|---|---|---|---|
| cc_cookie | Dauerhaft (6 Monate) | plainstaff.com | Speichert, ob das Cookie-Fenster ausgeblendet wurde oder nicht (erforderlich). |
| _ga | Dauerhaft (2 Jahre) | google.com | Google analytics cookie zur Unterscheidung der User (optional). |
| _ga_G6C541WTRJ | Dauerhaft (2 Jahre) | google.com | Google analytics cookie zur Speicherung des Session Status (optional). |
| _gid | Dauerhaft (1 Tag) | google.com | Google analytics cookie zur Unterscheidung der User (optional). |
| _gcl_au | Dauerhaft (2 Jahre) | google.com | Google Ad Sense cookie zum Tracking von Conversions (optional). |
Cookies unserer Web App
Our Web App (accessible under all other subdomains except www.plainstaff.com) is not public and only accessible after the user logs in. Upon logging in, the user must agree to the GTC and these privacy provisions. The following cookies required for using the Web App are created in the process:
| Cookie ID | Typ | Domain | Beschreibung |
|---|---|---|---|
| appStoreDialog | Dauerhaft (3 Monate) | plainstaff.com | Speichert, ob die Information dass auch eine native App auf Smart Devices zur verfügung steht, bereits angezeigt wurde. |
| exportbookingsdialog.settings | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die Einstellungen des Export Bookings Dialogs. |
| myprojects.filter | Dauerhaft (1 Jahr) | plainstaff.com | Speichert den Filter der Projekte. |
| myprojects.statusfilter | Dauerhaft (1 Jahr) | plainstaff.com | Speichert den Statusfilter der Projekte. |
| TimesheetSettings | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die Einstellungen des Timesheet Dialogs. |
| TimesheetSignatureClient | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die Kundenunterschrift des Timesheets. |
| TimesheetSignatureProvider | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die Providerunterschrift des Timesheets. |
| TimesheetLanguage | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die Sprache des Timesheets. |
| LastRoute | Dauerhaft (1 Woche) | plainstaff.com | Speichert die zuletzt besuchte Route der App. |
| user | Dauerhaft (2 Wochen) | plainstaff.com | Speichert das Zugriffstoken falls der Benutzer dies beim Login gewählt hat. |
| ssouser | Dauerhaft (2 Wochen) | plainstaff.com | Speichert das SSO-Zugriffstoken falls der Benutzer dies beim Login gewählt hat. |
| Tenant | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die den Namen des Tenants. |
| dialog_maximized | Dauerhaft (1 Jahr) | plainstaff.com | Speichert ob die modalen Dialoge maximiert angezeigt werden sollen oder nicht. |
| ShowDetails | Dauerhaft (1 Jahr) | plainstaff.com | Speichert ob im Zeitkonto die Details ein- oder ausgeblendet werden. |
| projectbookings.project | Dauerhaft (1 Jahr) | plainstaff.com | Speichert das zuletzt ausgewählte Projekt. |
| projectbookings.task | Dauerhaft (1 Jahr) | plainstaff.com | Speichert den zuletzt ausgewählten Task. |
| updateNotes | Dauerhaft (1 Jahr) | plainstaff.com | Speichert ob die Neuigkeiten bereits angezeigt wurden oder nicht. |
| Language | Dauerhaft (1 Jahr) | plainstaff.com | Speichert die eingestellte Sprache der App. |
| Theme | Dauerhaft (1 Jahr) | plainstaff.com | Speichert das eingestellte Theme der App. |
| SessionId | Temporär | plainstaff.com | Speichert die ID der aktuellen Session. |
| refreshToken | Temporär | plainstaff.com | Speichert das refresh token. |
| refreshTokenId | Temporär | plainstaff.com | Speichert die ID des refresh tokens. |
Data Transfer
Transfer to Third Parties
We dislike spam just as much as you do. We will therefore not pass on your data to third parties unless permitted by law. A transfer of your data may either
- be necessary for the fulfillment of a contract and then permitted under Art. 6 para. 1 lit. b GDPR, or
- be permitted on the basis of our legitimate interest in an effective service structure pursuant to Art. 6 para. 1 lit. f GDPR,
- be covered by consent granted by you, or
- become necessary if we are lawfully called upon by a state or authority pursuant to Art. 6 para. 1 lit. c GDPR to surrender your data. Insofar as your data is passed on to third parties, this is listed in this privacy policy.
Rights of Users
You can request information free of charge from us at any time regarding the personal data stored about you. For the prevention of abuse, identification of your person will be required.
Deletion, Rectification, Restriction
You can request rectification (including by supplementation) of inaccurate data from us at any time as well as restriction of its processing or deletion of your data. This applies in particular if the processing purpose has expired, a required consent has been revoked and no other legal basis exists, or our data processing is unlawful. We will then rectify, block, or even delete your personal data without delay within the statutory framework.
Objection
YOU MAY OBJECT AT ANY TIME TO ANY PROCESSING OF YOUR PERSONAL DATA THAT WE BASE ON A BALANCING WITH YOUR INTERESTS PURSUANT TO ART. 6 PARA. 1 LIT. F GDPR, IF REASONS EXIST THAT ARISE FROM YOUR PARTICULAR PERSONAL SITUATION. WE WILL THEN NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS ON OUR PART.
Data Portability
You can request the transfer of data stored concerning your person from us in machine-readable form.
Complaint
Insofar as you feel violated in your rights by our data processing, you can lodge a complaint with the competent supervisory authority (here you will find a list of authorities).
Amendment of the Privacy Policy
Should an amendment of the privacy policy become necessary for legal or factual reasons, we will update this page accordingly. In doing so, no changes will be made to consents granted by the user.
Data Entries
Encryption
When you enter data on our website, whether in a contact form, on the occasion of registration, logging in, or for payment purposes, the web page on which you enter data is encrypted. As a result, third parties cannot read what data you enter. You can recognize encryption by the lock symbol in your browser and by the address line beginning with "https" instead of just "http".
Registrations
If you register on our website, we ask for mandatory and optionally non-mandatory data in accordance with our registration form for the purposes specified below. The entry of your data is encrypted; third parties cannot read your data during entry. The basis for this storage is our legitimate interest in communicating with interested users pursuant to Art. 6 para. 1 lit. f GDPR and, in the case of contracts (including gratuitous ones), also the storage of contractual data pursuant to Art. 6 para. 1 lit. b GDPR. Your data remains stored as long as the registration continues, in particular as long as storage is still necessary for contract fulfillment/execution, for legal prosecution by us, or for our other legitimate interests, or we are legally required to retain your data (e.g., within the framework of statutory tax retention periods).
External Providers
To provide our website and service, we make use of external service providers. Who these are and how data processing is regulated in detail can be found in the following sections. The external service providers are:
- Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
- Database, hosting, and backup
- SENDINBLUE, 7 rue de Madrid, 75008 Paris, France
- Email dispatch
- Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
- Payment information
- Google Ireland Limited, incorporated and operating under the laws of Ireland (Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland
- Analytics and Ad Sense The basis for passing on your data to all these external partners is primarily the processing of your contractual data pursuant to Art. 6 para. 1 lit. b GDPR as well as our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6 para. 1 lit. f GDPR.
Microsoft
If you choose to use our app and create a user account, all data that you enter in the app is stored in a German data center operated by Microsoft. Both transmission and storage of data take place in encrypted form. Every day, your data is additionally backed up in a Dutch data center operated by Microsoft. The backup is retained for one week and serves to restore the service in case of error. All Microsoft data centers and services are certified (ISO/IEC 27001, ISO 9001, ISO 27002, ISO 27018, NIST 800-171, UK G-Cloud, etc.). Microsoft processes our data in accordance with its own Data Processing Agreement (available upon request) and taking into account the EU Standard Contractual Clauses.
Sendinblue
The dispatch of emails from PlainStaff (e.g., for forgotten passwords) and newsletters (approx. one every 3 months) takes place via Sendinblue. For this purpose, no further personal data is stored on Sendinblue servers other than the email addresses of the recipients. Sendinblue processes our data in accordance with its own Data Processing Agreement (available upon request) and taking into account the EU Standard Contractual Clauses.
Stripe
If you opt for a subscription, all payment information (billing address, credit cards, ...) is stored exclusively on Stripe servers. Stripe generates a monthly invoice and handles the payments. Stripe processes our data in accordance with its own Data Processing Agreement (https://stripe.com/de/legal/dpa).
We use Google Analytics for the anonymized analysis of user behavior in our public information offering under the domain (www.plainstaff.com). In addition, we use anonymized conversion measurement of our advertisements in Google Ad Sense. The visitor can object to both upon their first visit to the website. Under no circumstances is the visitor's IP address stored by Google. All data remains on servers within the EU. Google also processes our data in accordance with its own Data Processing Agreement (available upon request) and taking into account the EU Standard Contractual Clauses.