We, tenzing IT Operations GmbH (“tenzing IT Ops/we”), are pleased about your visit to our website and your interest in our services. In the following provisions, we inform you about the type, scope, and purposes of the collection and use of your personal data on this website. Personal data includes all information that relates to an identified or identifiable natural person. This includes, in particular, your name and your email address.

1. Provider and Data Protection Officer

The provider of the website and the party responsible under data protection law is:

tenzing IT Operations GmbH
Hutmacherring 6
23556 Lübeck

Managing Director: Björn Meyer

Phone: +49 451 120 135 0
Email: kontakt@tenzing-operations.de

You can reach the Data Protection Officer of tenzing IT Operations GmbH at:

Anywhere digital GmbH
Konstantin Pflüger
Hoheluftchaussee 40a
20253 Hamburg

Email: datenschutz@tenzing.de

2. Data Security

To protect your personal data on this website, we use a secure online transmission procedure known as “Secure Socket Layer” (SSL) transmission. You can recognize this by the closed lock symbol displayed next to the address component https://. By clicking on the symbol, you can access information about the SSL certificate being used. The display of the symbol depends on the browser version you are using. SSL encryption ensures the encrypted and complete transmission of your data.

3. Data Processing to Enable Website Usage

Every time content is accessed on our website, connection data is transmitted to our web server. This connection data includes:

• The IP address (Internet Protocol address) of the respective user
• The date and time of the request
• The referrer URL
• Device numbers such as UDID (Unique Device Identifier) and similar device numbers
• Device information (e.g., device type), and
• Browser type / browser version

This connection data is not used to draw conclusions about the user’s identity or combined with data from other sources. It serves solely to provide the website. After no more than 7 days, the data is anonymized by shortening the IP address to domain level. The legal basis for processing your data is Art. 6(1)(f) GDPR.

4. Recipients or Disclosure of Personal Data

We generally do not disclose data to third parties, especially not for advertising purposes. However, our website is hosted by an external service provider. In this case, your personal data collected on our website is stored on the servers of the service provider.

Our hosting provider is used for contract execution and fulfillment in accordance with Art. 6(1)(b) GDPR to ensure we can offer our services securely and efficiently.

The following service partner is involved in hosting:

united-domains AG
Gautinger Straße 10
82319 Starnberg

All data protection measures are observed, and the service provider processes your data only to the extent necessary to fulfill its obligations.

We carefully select our service providers and only engage those who provide sufficient guarantees for implementing appropriate technical and organizational measures under the GDPR and BDSG-new. To ensure the highest security, our service providers are bound by instructions, committed to confidentiality, regularly reviewed, and have signed data processing agreements in accordance with Art. 28 GDPR.

5. Types and Categories of Data

The following types of data are regularly processed, depending on what data has been provided to us:

• IP addresses
• Contact inquiries
• Meta and communication data
• Contract data
• Contact details
• Names
• Website visits
• Other data generated via a website

6. Data Collection During Applications

We collect and process personal data from applicants for the purpose of processing the application procedure in accordance with Art. 6(1)(f) GDPR.

If your application relates to a specific job advertised by us, we process the data provided solely for the purpose of processing this application.

If the processing takes place electronically, e.g., via email, please note that this generally does not constitute a secure transmission.

If your application also relates to other or future positions, we will only process your data if you have given us your consent. This consent can, of course, be withdrawn at any time with effect for the future and does not affect processing prior to withdrawal.

If we conclude an employment contract with an applicant, the transmitted data will be stored in compliance with statutory provisions for the purpose of processing the employment relationship in accordance with Art. 88 GDPR in conjunction with § 26 BDSG.

If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, unless the applicant has consented to further processing in accordance with Art. 6(1)(a) GDPR. The six-month period arises from the need to defend against claims under the General Equal Treatment Act (§ 15(4) AGG). The data will then be retained as evidence and deleted after the six-month period.

7. Use of Microsoft Teams as a Video Conferencing Tool

We process personal data as the controller for conducting video conferences. The scope of data processing largely depends on the information you provide during registration or participation.

The purpose is to communicate with customers or interested parties via video conferences.

If personal data of our employees is processed, § 26 BDSG is the legal basis. Otherwise, data is processed based on Art. 6(1)(b) GDPR as part of contractual or pre-contractual measures regarding the initiation or maintenance of business contacts.

If you access Microsoft’s website, Microsoft is the controller. For conducting meetings, tenzing IT Operations GmbH is the controller. You have the option to join via the app (which you can download) or directly through the browser without downloading the app. To enter the meeting room, you must at least provide your name.

Relevant personal data includes personal details (name, phone number, and other contact details), meeting metadata (subject, optional description, participant IP addresses, device/hardware information, and your device’s IP address). Written communication in Microsoft Teams’ chat function is recorded only if necessary for the results of the online meeting. This will be communicated transparently in advance, and consent will be obtained.

We use Microsoft Teams to conduct online meetings. If we intend to record an online meeting, we will inform you transparently in advance and – if necessary – obtain your consent.

We generally delete personal data when there is no longer a need to store it. A need can exist particularly if the data is still required to fulfill contractual services, review and grant or defend warranty and guarantee claims. If legal retention obligations apply, deletion will only take place after the respective retention period expires.

The necessary data processing agreements and the conclusion of so-called Standard Contractual Clauses are in place.

8. Email

You have the option to send us an email. The data you transmit to us in this process will be stored. At the end of the year, we will review whether further storage is necessary, for example, due to existing retention periods. Otherwise, the data will be deleted.

9. Data Transmission

We only pass on your personal data to third parties or other recipients if this is necessary to provide services, you have given your consent, a legal obligation exists, or the transfer is permissible based on another legal basis. Where necessary, we have concluded agreements with the recipients of your data for commissioned processing in accordance with Art. 28 GDPR.

10. Data Transfer to Countries Outside the EU

Where necessary for our purposes, we also transfer your data to recipients outside the EU, provided that the recipient of the data ensures an adequate level of data protection and no other legitimate interests conflict with the data transfer. Details of this can be found in the corresponding information in this privacy policy.

11. Duration of Storage of Personal Data / Criteria for Determining the Duration

Your personal data will only be stored for as long as necessary for the aforementioned processing purposes or, in the case of an objection, unless there are compelling legitimate grounds for processing, or in the case of withdrawal, unless another legal basis for processing exists. In certain cases, for example, where a statutory retention obligation exists, your personal data will not be deleted immediately but initially blocked.

12. Your Rights

Within the framework of legal regulations, you generally have the right to confirmation from tenzing IT Operations GmbH regarding whether personal data concerning you is being processed by tenzing. This includes:

• Access to this data and the circumstances of the processing
• Correction of this data if it is inaccurate
• Deletion if there is no justification or obligation for retention
• Restriction of processing in specific legally defined cases
• Objection to data processing based on Art. 6(1)(f) GDPR, and
• Transmission of your personal data – as provided by you – to you or a third party in a structured, commonly used, and machine-readable format.

If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time, resulting in the prohibition of future processing of your personal data. This does not affect the lawfulness of processing carried out based on consent before its withdrawal. Please also note the "Cookie Settings" button on our website.

Please send your specific request in writing or via email, ensuring clear identification of your person, to:

tenzing IT Operations GmbH
Hutmacherring 6
23556 Lübeck

Phone: +49 451 120 135 0
Email: kontakt@tenzing-operations.de

Finally, we would like to inform you of your right to file a complaint with the supervisory authority.

In the event of data protection violations, the data subject has the right to file a complaint with a supervisory authority.

The supervisory authority responsible for us in data protection matters is:

Independent Centre for Privacy Protection
Holstenstraße 98
24103 Kiel

Email: mail@datenschutzzentrum.de

13. No Automated Individual Decision-Making

We do not use your personal data for automated individual decision-making.

14. Changes to the Privacy Policy

New legal requirements, business decisions, or technical developments may require changes to our privacy policy. The privacy policy will then be adjusted accordingly. The latest version is always available on our website.