Privacy Policy of Arkwright Digital GmbH
The provisions of the EU General Data Protection Regulation (GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this Regulation (see Articles 13 and 14 GDPR). If you have any questions or comments regarding this Privacy Policy, you may at any time direct them to the e-mail address given under sections 1.2 or 1.3.
1.Overview
In this section of the Privacy Policy, you will find information on the scope of application, the controller responsible for data processing, and its Data Protection Officer.
1.1 Scope of application
On this page we inform you about the nature, scope and purpose of the personal data collected by Arkwright Digital GmbH, which is processed both when you visit this website and in other processing activities under our responsibility that are not related to this website.
1.2 Responsible
The controller for data processing, that is, the party who decides on the purposes and means of processing personal data—in connection with these processing activities is:
Arkwright Digital GmbH
Fischertwiete 2
20095 Hamburg
Phone: +49 40 2716 62-0
E-Mail: info@arkwright-digital.com
1.3 Data Protection Officer
You may contact our data protection officer as follows:
https://www.dsextern.de/anfragen
DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22
D-22589 Hamburg
2.Details of Data Processing
In this section of the Privacy Policy, we inform you in detail about the processing of personal data. For better clarity, we organize these details by specific functionalities.
2.1 General Information on Data Processing
For all of the processing operations described below, unless otherwise stated, the following applies:
2.1.1 No obligation to provide data
There is neither a contractual nor a legal obligation to provide personal data. You are not required to provide data.
2.1.2 Consequences of non-provision
If you do not provide data marked as mandatory (i.e., required fields), the respective service cannot be provided. Otherwise, failure to provide data may mean that our services cannot be offered in the same form or quality.
2.1.3 Disclosure to state authorities
We disclose personal data to public authorities (including law enforcement) only if this is necessary to fulfil a legal obligation to which we are subject (legal basis: Art. 6 (1)(c) GDPR), or if it is necessary for the assertion, exercise or defense of legal claims (legal basis: Art. 6 (1)(f) GDPR).
2.1.4 Storage period
We do not store your data longer than necessary for the purposes for which it was collected. Once the data are no longer required, they are regularly deleted—unless a temporary retention is still necessary, for example for:
- Compliance with commercial and tax retention obligations
- Preservation of evidence in legal disputes under statutory limitation periods
2.1.5 Categories of recipients
In addition to the recipient categories explicitly listed below, personal data may also be passed on to: shipping service providers, telephone and fax providers.
2.1.6 Data categories
Account data: Login/user ID and password
Master data: Title, salutation/gender, first name, last name, date of birth
Address data: Street, house number, additional address details, postal code, city, country
Contact data: Telephone number(s), fax number(s), e-mail address(es)
Registration data: Information on the service through which you registered; timestamps and technical details of registration, confirmation and deregistration; any data you provided upon registration
Access data: Date and time of service access; referring page; pages viewed; session ID; plus technical details of the accessing system (IP address, browser type and version, device type, operating system, etc.)
Application data: CV, certificates, credentials, work samples, images
2.2 Website Access
Here we describe how we process your personal data when you access the website.
2.2.1 Processing Details
Data category: Access data
Purpose: Establishing connection; displaying content; detecting attacks via unusual activity; error diagnosis
Legal Basis: Legitimate interests (Art. 6 (1)(f) GDPR)
Legitimate interest: Proper functioning of services; security of data and business processes; prevention of misuse; protection against system intrusions
Storage period: 7 days
Recipient: Usercentrics Consenttool and Hosting Service: WebFlow
LinkedIn
We maintain a presence at https://www.linkedin.com/company/arkwright/mycompany/. LinkedIn Ireland Unlimited Company operates the service. For details on data processing by LinkedIn, see https://www.linkedin.com/legal/privacy-policy. Visiting or interacting with our LinkedIn page causes LinkedIn to process personal data, whether or not you have a LinkedIn account. If you are logged in, LinkedIn may merge this information with your account data and use it to build profiles. If you wish to prevent profiling, please log out before visiting our page. Via “Page Insights” LinkedIn provides us with aggregated statistics (e.g. gender, age range, location, page views, interactions, paid activities, reach, impressions). These data cannot be traced back to individual visitors. We use them under Art. 6 (1)(f) GDPR to make our presence more relevant and interesting.
We are joint controllers with LinkedIn for processing on our LinkedIn page; the joint-controller addendum is available at https://legal.linkedin.com/pages-joint-controller-addendum. You may exercise your rights as outlined here either with us or with LinkedIn, and we will forward your request according to our agreement.
2.2.2 Tracking for Analysis, Optimization and Advertising
Information on the services we use can be found in the Consenttool:
https://web.cmp.usercentrics.eu/ui/loader.js
2.3 Job applications
In an ongoing application process, we process your personal data in the following ways:
2.3.1 Processing Details
Data categories:
a. Data categories
b. Address Data
c. Contact details
d. Application details
Purpose:
a. Identification, contact, age verification
b. Identification, Contact and contract negotiation
c. Identification, Contact and contract negotiation
d. Candidate selection
Legal basis: Section 26 BDSG-neu in conjunction with Art. 88 GDPR
Legitimate interest: -
Storage period: 6 months
Recipients: HR department and OnApply
2.4 Customer Support:
You can find out how we process your personal data when you contact our customer service here:
2.4.1 Processing details
Data categories:
a. Master Data
b. Contact data
c. Inquiry/complaint content
Purpose: Handling customer inquiries and complaints
Legal Basis:
a. Contract (Art. 6 (1))
b. Legitimate interests (Art. 6 (1)(f) GDPR)
Legitimate interest: Customer retention and service improvement
Storge Period: Until completion of request
Recipients: Reception and the respective responsible people
3. Data Subject Rights
3.1 Right to Object
You may object at any time, for reasons arising from your particular situation to processing based on Art. 6 (1)(e) or (f) GDPR, including profiling under those provisions. This right is free of charge and applies with future effect.
3.2 Right of Access
You have the right to learn whether we process personal data about you, which data those are, and to receive further information as per Art. 15 GDPR.
3.3 Right to Rectification
You may demand correction of inaccurate personal data concerning you without undue delay (Art. 16 GDPR). You also have the right to request completion of incomplete data.
3.4 Right to Erasure („Right to be Forgotten”)
You may request deletion of personal data concerning you if one of the grounds in Art. 17 (1) GDPR applies, and processing is not necessary for purposes listed in Art. 17 (3).
3.5 Right to Restrict Processing
You may request restriction of processing under the conditions of Art. 18 (1)(a)–(d) GDPR.
3.6 Right to Data Portability
You have the right to receive data you provided in a structured, common and machine-readable format and to have it transmitted to another controller where technically feasible, when processing is based on consent or contract and is automated.
3.7 Right to Withdraw Consent
You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
3.8 Right to Lodge a Complaint
You have the right to file a complaint with a supervisory authority.
As of: 16.06.2025