+49 431 70979331
EN
Scope and permission of the processing of personal data
As a matter of principle, we collect and use personal data of our users only insofar as this is necessary to provide the functionality of our website as well as our content and services. We collect and use the personal data of our users regularly, and only with the user's consent.
An exception applies in cases in which circumstances prevent us from obtaining prior consent and the processing of the data is permitted by law.
The legal basis for processing operations of personal data with prior consent of the data subject is Art. 6 para. 1 point a GDPR. The legal basis for the processing of personal data that is required for the performance of a contract or for the implementation of pre-contractual measures is Art. 6 para. 1 point b GDPR. When processing personal data to comply with a legal obligation, the legal basis is Art. 6 para. 1 point c GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, the legal basis for processing is Art. 6 para. 1 point d GDPR. If the processing is necessary to protect a legitimate interest of our company or that of a third party and if these interests outweigh the interest of the data subject, taking into account the fundamental rights and freedoms of the data subject, the legal basis for data processing is Art. 6 para. 1 point f GDPR.
Data deletion and storage duration
The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, data may be stored if we are required by law to process the data. In this case, the data will be blocked or deleted when the legally prescribed storage period expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.
Data transfer
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if you have provided your express consent in accordance with Art. 6 para. 1 S. 1 point a GDPR, where the disclosure in accordance with Art. 6 para. 1 S. 1 point f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-transfer of your data, in the event that the transfer is legally required in accordance with Art. 6 para. 1 S. 1 point c GDPR, as well as where legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 S. 1 point b GDPR.
Description and scope of data processing and legal basis
Each time our website is accessed, our system (or its web space provider) automatically collects data and information from the computer system of the accessing computer.
In this context, the following data will be collected:
Name of the retrieved website, file, date and time of the retrieval, transferred data volume, report on successful access, browser type along with the version, the operating system of the user, URL referrer (previously visited page), the IP address and the inquiring provider.
The data is also stored in the log files of our system. This data is not stored together with any other personal data of the user. The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 point f GDPR.
Purpose of the data processing
The system needs to temporarily store the IP address to enable the website to be delivered to the user's computer. For the said purpose, the user's IP address must be stored for the duration of the session.
Log files are saved to ensure the functionality of the website. We use this data in particular to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 Para. 1 point f GDPR.
Description and scope of data processing
We use cookies to make our website more user-friendly. Some functions of our website require that the calling web browser can still be identified even after a page change.
Cookies are small files that enable specific information related to the device to be stored on the user's access device (PC, smartphone or similar). On the one hand, they serve to improve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they serve to collect statistical data on website use in order to analyze such data for the purpose of offer improvement. Users can control the use of cookies. Most browsers have the option to limit or completely prevent the storage of cookies. However, it should be noted that the use and in particular the convenience of use are restricted without cookies.
The user data acquired in this way is pseudonymised by means of technical procedures. Therefore, it is no longer possible to assign the data to the calling user. The data will not be stored together with the user's other personal data.
The legal basis for the processing of personal data by using cookies is Art. 6 para. 1 point f GDPR. The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 point f GDPR. The legal basis for processing personal data by using cookies for analysis purposes, if the user's consent to this has been obtained, is Art. 6 para. 1 point a GDPR.
Purpose of data processing
The purpose of using technically essential cookies is to simplify the use of websites. Some features of our website will not be available if the use of cookies is disabled. This requires that the browser is recognized even after a page change.
Analytics cookies are used for the purpose of improving the quality of our website and its content. The cookies enable us to find out how the website is used and thus to constantly optimise our offer.
For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 Para. 1 point f GDPR.
Description and scope of data processing
A contact form is available on our website, which can be used for contacting us online. If a user makes use of this option, the data entered in the contact form as well as the IP address, the date and the time will be transmitted to us and stored. Your consent for the processing of the data is obtained as part of the submission process and reference is made to this privacy policy. The legal basis for the processing of the data in this case is Art. 6 para. 1 point a GDPR.
Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted via e-mail will be stored. Such data will not be transmitted to third parties in this context. The legal basis for the processing of this data is Art. 6 para. 1 point f GDPR. If the e-mail contact is targeted at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 point b GDPR.
Purpose of data processing
The processing of personal data from the contact form serves us solely for the purpose of contract processing. In the event of contact by e-mail, this also holds the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is intended to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. For the personal data from the input screen of the contact form and those sent by e-mail, this is the case when the respective contact with the user is terminated. The contact is terminated when it can be inferred from the circumstances that the matter in question has been finally clarified.
Personal data that was additionally collected during the submission procedure will be deleted within seven days at the latest.
Possibility of objection and deletion
The user has the option of revoking his or her consent to the processing of personal data at any time. If the user contacts us by e-mail, he/she can object to the storage of his/her personal data at any time. In such a case, contact cannot be continued in order to clarify the facts concerned.
In this case, all personal data stored in the course of contacting us will be deleted.
Comments
We offer users the opportunity to leave individual comments on our website. If you leave a comment, then information on the time of entering the comment and the user name (pseudonym) chosen by the data subject will also be stored and published in addition to the comments you leave. Furthermore, the IP address assigned by the Internet service provider (ISP) of the data subject is also logged. This storage of the IP address takes place for security reasons and in the event that the person concerned infringes the rights of third parties by posting a comment or posts illegal content. Storage of such personal data is therefore in the data controller's own interest, so that he can be exonerated if there is a violation of the law. This collected personal data will not be passed on to third parties, unless such a transfer is required by law or serves the legal defense of the controller.
The controller has integrated the contents, services and benefits of other providers on the website. These include maps provided by Google Maps, videos from YouTube, as well as graphics and images from other websites. In order for these data items to be called up and displayed in the user's browser, the transmission of the IP address is absolutely necessary. The providers (hereinafter referred to as "third-party providers") thus perceive the IP address of the respective user.
Although we make every effort to use only third-party providers who only need the IP address to deliver content, we have no influence on whether the IP address may be stored. In this case, this process is used for statistical purposes, among other things. If we are aware that the IP address is stored, we shall inform our users of this fact.
The data controller has integrated the Google Analytics component (incl. the anonymisation function) on this website. Google Analytics is a web analytics service. Web analysis describes the surveying, collecting and analysing data regarding the behaviour of visitors to websites. A web analysis service collects, among other things, data about the website from which a data subject has accessed a website (so-called referrer), which subpages of the website have been accessed or how often and for how long a subpage has been viewed. A web analysis is mainly used to optimise a website and to analyse the cost-benefit of Internet advertising.
The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
The controller uses the suffix "_gat._anonymizeIp" for web analysis via Google Analytics. Using this addition, Google shortens and anonymises the data subject's IP address when accessing our Internet pages from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports showing us the activities on our websites, and to provide other services related to the use of our website.
Google Analytics places a cookie on the data subject's device. Cookies have already been explained above. The placement of this cookie enables Google to analyse the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google receives information about personal data, such as the data subject's IP address, which Google uses, among other things, to track the origin of visitors and clicks, and subsequently to facilitate settlement of commissions.
Cookies are used to store personal information, such as the time of access, the location from which access was made and the frequency of the data subject's visits to our website. Each time a data subject visits our web pages, their personal information, including the IP address of their Internet connection, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose such personal data collected through the technical process to third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or by means of other software programs.
Furthermore, the data subject has the option to object to and prevent the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout This browser add-on informs Google Analytics via JavaScript that no data and information regarding visits to web pages may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If the data subject's information technology system is deleted, formatted or reinstalled at a later time, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their control, it is possible to reinstall or reactivate the browser add-on.
Additional information and Google's privacy policy can be found at https://www.google.com/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.
On our website we use the component "Google Maps" from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as „Google“.
Each time the "Google Maps" component is called up, a cookie is set by Google in order to process user settings and data when displaying the page on which the "Google Maps" component is integrated. As a rule, this cookie is not deleted when you close your browser but expires after a certain period of time unless you previously delete it manually.
If you do not agree to this processing of your data, it is possible to deactivate the "Google Maps" service and thus prevent the transfer of data to Google. To do this, you must deactivate the JavaScript function in your browser. However, we would like to point out that in this case you will not be able to use the "Google Maps" component or will only be able to use it to a limited extent.
The use of "Google Maps" and the information obtained via "Google Maps" is carried out in accordance with the Google Terms of Use http://www.google.de/intl/de/policies/terms/regional.html and the additional Terms and Conditions for "Google Maps " https://www.google.com/intl/de_de/help/terms_maps.html.
In order to protect input forms on our site, we use the "reCAPTCHA" service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google". By using this service, it is possible to distinguish whether the corresponding input is of human origin or misused by automated machine processing.
To our knowledge, the referrer URL, the IP address, the behavior of website visitors, information about the operating system, browser and duration of visit, cookies, display instructions and scripts, the user's input behavior and mouse movements in the area of the "reCAPTCHA" checkbox are transmitted to "Google".
Google uses the information obtained in this way, among other things, to digitize books and other printed matter and to optimize services such as Google Street View and Google Maps (e.g. House number and street name recognition).
The IP address transmitted as part of "reCAPTCHA" will not be merged with other Google data unless you are logged into your Google account at the time of using the "reCAPTCHA" plug-in. To prevent your personal data and your behavior on our website from being transmitted and stored by "Google", you must log out of Google before visiting our site and the reCAPTCHA plug-in.
The use of the "reCAPTCHA" service obtained information is in accordance with the Google terms of use: https://www.google.com/intl/de/policies/privacy/.
This website uses external fonts: Google Fonts. Google Fonts is a service of Google Inc. ("Google"). Integration of these web fonts is implemented via a server access, typically a Google server in the United States. This transmits information to the server as to which of our website pages you have visited. Google also stores the IP address of the browser of the end device of the visitor to these web pages. For more information, please refer to Google's Privacy Notice, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
We collect and process the personal data of applicants for the purpose of processing the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests on our part oppose the deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the responsible party:
Right to information
You can request that the responsible party confirms whether we will process personal data that concerns you. If such processing has taken place, you can request the following information from the controller:
(1) the purposes for which the personal data is being processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;
(4) how long the controller plans to store your personal data, or, if specific information in this respect is not possible, the controller's criteria for determining the storage period;
(5) the existence of a right to rectification or deletion of personal data relating to you, the right to restriction of processing by the controller or the right to object to such processing;
(6) the existence of the right to lodge a complaint with a supervisory authority;
(7) any available information on the origin of the data if the personal data has not been collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Art. 22 para. (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the implications and intended effects of such procedures for the data subject.
You have the right to be informed as to whether your personal data will be transmitted to a third country or an international organisation. In this regard, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in relation to transfer.
Right to correction
You have the right to rectification and/or completion by the data controller if the personal data processed concerning you is either incorrect or incomplete. The data controller is required to make the correction immediately.
Right to restriction of processing
You have the right to obtain the restriction of processing from the controller where one of the following applies:
(1) if you contest the accuracy of your personal data, for as long as it takes the data controller to verify its accuracy;
(2) if the processing is unlawful and you refuse to have the data deleted and instead wish to restrict its use;
(3) The data controller no longer needs the personal data for the purposes of processing, however, you require the data for the establishment, exercise or defense of legal claims; or
(4) when you have objected to processing pursuant to Art. 21 para. (1) GDPR pending the verification whether the legitimate grounds of the controller override your ground.
If the processing of personal data concerning you has been restricted, then – apart from its storage – this data may only be processed with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.
If the processing restriction has been done in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.
Deletion obligation
You shall have the right to obtain the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
(1) your personal data is no longer necessary for the purposes for which it was originally collected or otherwise processed;
(2) you withdraw the consent on which the processing is based according to Art. 6 (1) (a) or Art. 9 (2) point a GDPR, and where there is no other legal ground for the processing.
(3) pursuant to Art. 21 para. (1) GDPR, and there are no overriding legitimate reasons for its continued processing, or you submit an objection to its processing in accordance with Art. 21 para. 2 GDPR you object to processing.
(4) your personal data has been processed unlawfully;
(5) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) the personal data concerning you was collected in relation to information society services in accordance with Art. 8 (1) GDPR.
Transfer of personal data to third parties
Where the data controller has made your personal data public and is required to erase it pursuant to Art. 17 (1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Exceptions
The right to deletion does not apply insofar as the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) or compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with Art. 9(2) as well as Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(5) to assert, exercise, or defend legal claims.
Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the data controller, the data controller will be obliged to communicate this rectification or deletion of the data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or requires a disproportionate effort.
You have the right against the data controller to be informed about who these recipients are.
Right to data portability
You have the right to obtain a copy of the personal data you have put at disposal of the data controller in a structured, commonly used, machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
(1) the processing is based on consent pursuant to Art. 6 para. (1) (a) GDPR or Art. 9 (2) (a) GDPR or on the basis of a contract in accordance with Art. 6 para. (1) point (b) GDPR and
(2) the processing is carried out by automated means.
In exercising this right, you shall also have the right to have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This action must not affect the freedoms and rights of other persons.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the data controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6(1) 1 lit. e or f GDPR, including profiling based on those provisions.
The data controller will no longer process the personal data relating to you unless they can prove a compelling, legitimate reason for this which outweighs your interests, rights, and freedoms or the processing serves to assert, exercise, or defend legal claims.
Where personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing; this includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Right to revoke the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Automated individual decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
(1) is necessary for us to establish or fulfill a contract with you;
2. is authorized by Union or Member State law to which the controller is subject, and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, the decisions shall not be based on special categories of personal data referred to in Article 9(1), GDPR, unless Article 9(2) 2 a or g is applied and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms, as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
Right to file a legal complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.
The supervisory authority to which the appeal is submitted will inform you about the status and results of the appeal, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
As a responsible company, we do not use automatic decision-making or profiling.
We use the most common SSL (Secure Socket Layer) method together with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. The transmission of a single page of our website in encrypted form is indicated on our website by the display of a closed key or lock icon in the bottom status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are improved continuously in order to meet state-of-the-art requirements.
Updating and changing the privacy policy
This privacy policy is currently valid and was last updated June 16, 2023.
It may be necessary to change this privacy policy from time to time as a result of the further development of our website and services or due to changes in the statutory or regulatory requirements. You can access and print out the current data protection declaration at any time via this address.
E-mail
Contact form
Job offers
Contact