Privacy policy

Download area:

Here you will find all current documents that we provide on the subject of data protection.

• Information according to Art. 13 / 14 DSGVO | Download ↓
• Appendix C: Processing activities | Download ↓

To conclude a contract on order processing with TMC GmbH, please contact us by mail: datenschutz@tmc-gmbh.de

• Unser Muster-Vertrag über Auftragsverarbeitung  | Download ↓

1. General notes and mandatory information

Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Note to the responsible authority

The person responsible for data processing on this website is:

Mirco Welsing, managing partner
Lise-Meitner-Straße 1 c
33104 Paderborn
Germany

Phone: +49 (0) 5251 6 888 70
Mail: info@tmc-gmbh.de

Responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke a previously given consent at any time. For this purpose an informal notification by e-mail to us is sufficient. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right of complaint to the responsible supervisory authority

In the event of violations of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent that it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct, block or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address given in the imprint.

Objection to advertising mails

The use of contact data published within the scope of the imprint obligation for the transmission of not expressly requested advertising and information material is hereby contradicted. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails

2. Data protection officer

Data Protection Officer required by law

We have appointed a data protection officer for our company.

Mr. Sebastian Tausch (datenschutzwegweiser.de)

IT Rechenwerk GmbH
Eichenkamp 14
32479 Hille
OT Holzhausen II
Germany

Phone: +49 (0) 571 951 968 00
Mail: datenschutz@it-rechenwerk.de

3. Data collection on our website

Cookies

The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this data protection declaration.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form is therefore exclusively based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing procedures carried out up to the time of revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

4. Social media

Facebook plugins (Like & Share button)

Our pages integrate plugins from the social network Facebook, provider Facebook Inc. 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like-Button" ("Like") on our page. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like-Button" while you are logged into your Facebook account, you can link the contents of our pages on your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the Pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information on this in the Facebook privacy policy at: https://de-de.facebook.com/policy.php.

If you do not want Facebook to be able to assign visits to our Pages to your Facebook user account, please log out of your Facebook user account.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.

IP anonymisation

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link An opt-out cookie will be set to prevent the collection of your information on future visits to this site:

[google_analytics_optout]Google Analytics deaktivieren[/google_analytics_optout]

You can find more information on how Google Analytics handles user data in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the "demographic features" function of Google Analytics. This allows us to generate reports that contain information about the age, gender and interests of the site visitors. This data is derived from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can disable this feature at any time in the ad settings in your Google Account or generally prohibit Google Analytics from collecting your information as described in the "Opting out of data collection" section.

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows you to link the advertising audiences created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you on one device (e.g. mobile phone) depending on your previous usage and surfing behavior can also be displayed on another of your devices (e.g. tablet or PC).

If you have given us permission, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same personalized advertising messages can be displayed on any device that you sign in with your Google Account.

To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to help us define and create audiences for cross-device advertising.

You can opt-out of cross-device remarketing/targeting permanently by turning off personalized advertising in your Google Account, following this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google Account is based solely on your consent, which you can give or withdraw to Google (article 6, paragraph 1, letter a DSGVO). For data collection operations that are not merged into your Google Account (e.g. because you do not have a Google Account or have objected to the merging), the collection of data is based on article 6, paragraph 1, letter f of the DPA. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the data protection regulations can be found in the Google data protection declaration at: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use what is known as conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can opt-out of this use by slightly disabling the Google conversion tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.

More information on Google AdWords and Google Conversion Tracking can be found in the Google data protection regulations: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Bing Universal Event Tracking (UET)

On our website, data is collected and stored using Bing Ads technologies, from which user profiles are created using pseudonyms. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows us to track the activities of users on our website when they come to our website through ads from Bing Ads. If you come to our website through such an ad, a cookie is placed on your computer. A Bing UET tag is included on our website. This is a code that is used in conjunction with the cookie to store some non-personal information about your use of the website. This information includes the time spent on the website, which areas of the website have been accessed and which advertisement has brought users to the website. Information about your identity is not collected.

The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the site and the processing of this data by disabling cookies. This may restrict the functionality of the website.

In addition, Microsoft may use cross-device tracking to track your usage across multiple electronic devices and may be able to display personalized advertising on Microsoft Web pages and apps. You can disable this behavior at http://choice.microsoft.com/de-de/opt-out 

For more information about Bing's analytics services, please visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). For more information about Microsoft and Bing's privacy practices, please see the Microsoft Privacy Policy (https://privacy.microsoft.com/de-de/privacystatement).

LinkedIn

We use the retargeting tool as well as the conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical, pseudonymous data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. As a rule, the following information, among other things, is collected: 

• LinkedIn User ID (Cookie ID)
• IP address
• Metadata of the website visit, such as browser type, website visited.

In addition, this information is used to be able to show you interest-specific and relevant offers and recommendations after you have informed yourself about certain services, information and offers on the website. The information in this regard is stored in a cookie.

If you wish to prevent this tracking, you can do so via the privacy settings in our cookie banner.

6. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example by clicking on the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you cancel the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected.

CleverReach

This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data entered by you for the purpose of receiving the newsletter (e.g. e-mail address) is stored on the CleverReach servers in Germany or Ireland.

Our newsletters sent with CleverReach allow us to analyze the behavior of the newsletter recipients. Among other things, we can analyze how many recipients opened the newsletter message and how often which link in the newsletter was clicked on. With the help of the so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. Further information about data analysis by CleverReach newsletter can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

If you do not want CleverReach to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data that you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after the newsletter has been cancelled. Data that has been stored for other purposes (e.g. e-mail addresses for the member area) remains unaffected.

For further details, please refer to the CleverReach privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Conclusion of a contract on commissioned data processing

We have concluded a contract with CleverReach for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.

7. Plugins and tools

YouTube

Our website uses plugins from the Google operated YouTube page. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our sites equipped with a YouTube plugin, a connection to the servers of YouTube is established. This tells the YouTube server which of our pages you have visited.

If you are logged in to your YouTube account, you allow YouTube to associate your surfing habits directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.

Further information on the handling of user data can be found in the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly.

To do this, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

If your browser does not support Web Fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy/.

Google Maps

This site uses the map service Google Maps via an API. Provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we indicate on the website. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in the Google data protection declaration: https://www.google.de/intl/de/policies/privacy/.

9. Register for the TMC Marketing Circle

I agree that TMC collects, stores and processes my personal data (e.g. name, address, telephone number, e-mail address) provided during registration for the Marketing Circle and uses them for its own promotional purposes (e.g. information about TMC services, offers and events).

My personal data may then be transferred to these third parties. TMC will store my personal data for the intended purpose and delete them after the end of the intended purpose, in case of non-use or obsolescence. My personal data will not be passed on to other, not contractually bound third parties or third parties not involved in the provision of services. Should this be necessary, TMC will obtain my permission in advance.

I am aware that I may revoke this consent at any time vis-à-vis Fujitsu by sending an e-mail to [info@tmc-gmbh.de] without stating reasons and that I may demand the corresponding deletion or blocking of the data for future use. If this results in disadvantages for me, I cannot derive any legal claims against TMC.

Application via mail, e-mail and application form on the website

We look forward to receiving your application by post, e-mail and via our application form. The processing is based on Article 6 Paragraph 1 letter b DSGVO contract performance and contract preparatory measures on request of the person concerned and § 26 BDSG-neu ("Data processing for purposes of the employment relationship").

If you give us your consent in your application to process your application documents on a long-term basis in order to take them into account in future job advertisements, this is done on the basis of Article 6 Paragraph 1 lit. a DSGVO consent. This consent is voluntary and can be revoked at any time in the future by sending us a message.

Your application documents will be processed in our company by the responsible employees. Your application documents will not be passed on to third parties, e.g. personnel agencies, in so-called third countries or international organisations.

With your application we will receive your name, contact and communication data (address, telephone numbers, e-mail etc.), as well as the information from your letter of application, curriculum vitae or the corresponding attachments. Which information we require in addition to the contact and communication data can be seen in the respective job advertisement. This information is necessary for our decision-making process. During the application procedure, we supplement this data with notes from the job interview, test results from recruitment tests, if applicable, as well as data in the context of communication (correspondence, telephone calls).

After completion of the job advertisement or the application procedure, and unless we have your consent to process your data for a longer period of time, we will store this data for 2 months in accordance with "legitimate interest" pursuant to Art. 6 Para. 1 lit. f DSGVO. Our legitimate interest is to be able to answer any queries or understand any discrepancies. The job advertisement procedure or application procedure ends at the end of the month in which we are unable to make you an offer of employment, you withdraw your application, object to the processing or request us to delete the documents.

A longer storage of the application documents is possible, beyond the consent according to Art. 6 para. 1 lit. a DSGVO, if we have to store the data due to another legal storage period according to Art. 6 para. 1 lit. c DSGVO or a longer storage, after consideration, is justified in our legitimate interest according to Art. 6 para. 1 lit. f DSGVO, e.g. for the assertion, exercise or defence of legal claims.

If we can make you a job offer, we will include the relevant information from the application procedure in your personnel file. The legal basis for this is Art. 6 para. 1 lit. b DSGVO (fulfilment of contract) and § 26 BDSG-neu ("Data processing for the purpose of the employment relationship"). Within the framework of the recruitment process, we also process further personal data, for which we then provide further information in accordance with Art. 13 DSGVO.

10. HubSpot

On this website, we use HubSpot for our online marketing activities. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

This is an integrated software solution that we use to cover various aspects of our online marketing. These include:

Email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, hits, etc. ...), contact management (e.g. user segmentation & CRM), landing pages and contact forms.

Our sign-up service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all collected information exclusively to optimize our marketing measures.

Furthermore, to improve the user experience on our website, we use HubSpot's live chat service "Messages" (round chat icon at the bottom right of the screen) for sending and receiving messages on some subpages. Upon consent and use of this function, the following data is transmitted to HubSpot's servers:

• Content of all chat messages sent and received.
• Context information (e.g. page on which the chat was used)
• Optional: e-mail address of the user (if provided by the user via chat function)

The legal basis for the use of the services of Hubspot is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is the optimization of our marketing measures and the improvement of our service quality on the website.

HubSpot is certified under the terms of the "EU - U.S. Privacy Shield Framework" and is subject to TRUSTe 's Privacy Seal and the "U.S. - Swiss Safe Harbor" Framework.

• More information about the Privacy policy of HubSpot »
• More information from HubSpot regarding EU data protection regulations »
• You can find more information about the cookies used by HubSpot here & here »

If you generally do not want HubSpot to collect data, you can prevent cookies from being stored at any time by changing your browser settings accordingly or by setting the opt-out via the privacy settings in our cookie banner.

11. Applicant Management 

By giving your consent in the context of applying for a position advertised with us, you agree that the inventory data submitted by you and listed below may be collected by us, stored in the applicant:inside file and processed and used for the purpose of proper organization and implementation of the application process: First name, last name, e-mail address, as well as other personal data contained in the uploaded resume and, if applicable, in the answers to the application questions. Furthermore, the following data will be collected and stored if you voluntarily make entries for this purpose: Place of residence and telephone number. You can object to this use at any time.

All data provided will be stored exclusively in accordance with the purpose of organizing, conducting and evaluating application processes and will be deleted after this purpose has expired.

In this context, the data is processed by the provider of our application management tool Homerun B.V. (registered office: Amsterdam, Netherlands). These are subject to the data protection provisions in accordance with the DSGVO. Furthermore, the data provided during the application process will not be passed on to third parties.

For this purpose, we have concluded an order processing agreement with Homerun in accordance with Art. 28 DSGVO. You can find Homerun's data protection notice at: https://www.homerun.co/privacy-statement