Data protection statement
1. Data protection at a glance
The following information provides a simple overview of what happens to your personal data when visiting this website. Personal data is data through which you may be personally identified. Further information on data protection can be found in the data protection statement following this text.
Data collection on this website
Who is responsible for data collection on this website?
The website provider collects data on this website. The website provider’s contact details are available on the site notice of this website.
How do we collect your data?
One instance in which we collect your data is when you give it us. For example, when you enter your data in a contact form.
Other types of data are automatically collected by our IT systems when you visit our website. This normally concerns technical data (e.g., web browser, operating system, or time of visit). This type of data is collected automatically when you visit this website.
What do we use your data for?
Some of your data is collected to ensure the disruption-free availability of this website. Other data is used to analyze your user behavior.
Which rights do you have with regard to your data?
You have the right to receive information on the origin, recipient, and purpose of your collected personal data at any time and free of charge. You also have the right to demand the deletion or correction of your personal data. For further information on this and questions around data protection, you can contact us via the address provided in the site notice. You also have the right to submit a complaint to the responsible regulatory authority.
Additionally, you have the right – under certain circumstances – to demand the limitation of the processing of your personal data. Details on this can be found in the data protection statement under “right to limitation of processing”.
Analysis tools and third-party tools
When visiting this website, your browsing behavior may be analyzed statistically. The analysis of your browsing behavior is generally done via cookies and analysis programs. The analysis of your browsing behavior is generally anonymously; the browsing behavior cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options to object can be found in the following data protection statement.
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the servers of the host. This especially includes IP addresses, contact requests, meta and communication data, contract data, contact data, names, website visits, and other data that may be generated by a website.
The external host is used to fulfil our contractual obligations with our potential and existing customers (art. 6 §1 lit. b GDPR) and in the interest of a safe, fast, and efficient provision of our online services via a professional provider (art. 6 § 1 lit. f GDPR).
Our host only processes your data insofar as it is necessary for the fulfilment of its contractual obligations, and is obliged to follow our instructions with regard to this data.
Contract on order processing
To ensure processing is in line with data protection, we signed a contract on order processing with our host.
3. General and obligatory information
The provider of this website takes the protection of your personal data extremely serious. We treat your personal data with confidentiality and in line with the applicable data protection regulations and this data protection statement.
When visiting this website, different types of personal data are collected. Personal data is data through which you may be personally identified. This data protection statement explains which data we collect, why, and how we use it. It also explains how and for which purpose we do this.
We advise you that data transfers on the internet (e.g., when communicating via e-mail) can involve security gaps. A perfect protection of your data from third-party access this thus not possible.
Information on persons responsible
The person responsible for the data processing on this website is:
Mr Frank Schäfer
abilis GmbH IT-Services & Consulting
Telephone: 0049 7244 70 80 0
The person responsible is the natural or legal person that decides – alone or with others – on the purpose and means of the processing of personal data (e.g., names, e-mail addresses, etc.).
Legally required data protection officer
We have appointed a data protection officer for our company.
Mr Robert Faußner, M.A.
HEUSSEN Rechtsanwaltsgesellschaft mbH
Brienner Straße 9 / Amiraplatz
80333 Munich / Germany
Tel: +49 89 290 97 161
Withdrawal of your consent to data processing
Many data processing procedures are only possible with your consent. You can withdraw previously provided consent. Sending an informal e-mail notification to us is sufficient for this purpose. The legality of data processing up to the point of withdrawal remains untouched.
Right to object to data collection in exceptional circumstances and to direct advertisement (art. 21 GDPR)
IF DATA PROCESSING OCCURS ON THE BASIS OF ART. 6 §1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS STEMMING FROM YOUR EXCEPTIONAL SITUATIONS; THIS ALSO APPLIES TO PROFILING RESTING ON THIS REGULATION. THE APPLICABLE LEGAL BASIS ON WHICH THE AGREEMENT RESTS IS SPECIFIED IN THIS DATA PROTECTION STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE REASONS NECESSITATING PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE ENFORCEMENT, FULFILLMENT, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 §1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISEMENT, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR RESPECTIVE PERSONAL DATA FOR THIS PURPOSE AT ANY TIME; THIS ALSO APPLIES TO PROFILING AS FAR AS IT RELATES TO SUCH DIRECT ADVERTISEMENT. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISEMENT (OBJECTION UNDER ART. 21 §2 GDPR).
Right to complain to the responsible regulatory authority
In case of GDPR violations, persons affected have the right to submit a complaint to the responsible regulatory authority, especially in a member state of their usual residence, their place of work, or the place of the suspected violation. The right to complain exists irrespective of other legal actions under administrative law or the judiciary system.
Right to data transfer
You have the right to demand the transfer of your data, which we process automatically based on your consent or for contractual obligations, in a common machine-readable format to you or a third party. Should you request the direct transfer of your data to a third party, this is only realized if technically possible.
SSL or TLS encryption
For security purposes and for the protection of transfers with confidential content, such as orders or enquiries that you may send to us as the website provider, we use an SSL or TLS encryption. You can recognize an encrypted connection as the address row of the browser will change from http:// to https:// as well as through the lock symbol in your browser row.
When the SSL or TLS encryption is activated, the data transferred to us cannot be read by third parties.
Information, deletion, or correction
In line with the applicable legal regulations, you have the right to demand information on your stored personal data, its origin and recipient, and the purpose of the data processing at any time and free of charge, as well as a right to demand the deletion or correction of this data. For this and for other questions around personal data, you may contact us at any time via the contact details provided in the site notice.
Right to limitation of processing
You have the right to demand the limitation of the processing of your personal data. For this purpose, you may contact us at any time via the contact details provided in the site notice. The right to limitation of processing applies in the following cases:
- When you contest the accuracy of your personal data stored by us, we normally require time to assess this. For the duration of this examination, you have the right to demand that we limit the processing of your personal data.
- When the processing of your personal data was/is unlawful, you can demand a limitation of data processing instead of the deletion of your data.
- When we no longer need your personal data, but require your data for the enforcement, defense or fulfilment of legal claims, you have the right to demand a limitation of data processing rather than a deletion of your data.
- When you have objected under art. 21 §1 GDPR, your interest needs to be weighed up against ours. Until it has been decided whose interest outweigh, you have the right to demand a limitation of the processing of your personal data.
Once you have limited the processing of your personal data, this data – expect for being saved – may only be processed with your consent, or for the enforcement, defense or fulfilment of legal claims, or for the protection of the rights of another natural or legal person, or for purposes of an important public interest of the European Union or a member state of the European Union.
Objection to advertisement e-mails
The use of the contact details published for the purpose of site notice duties for the transfer of not explicitly requested advertisement or information materials is hereby objected to. The owner of this website retains the right to commence legal proceedings in case of unsolicited sending of advertisement materials, such as spam e-mails.
4. Data collection on this website
This website uses so-called cookies. Cookies do not cause harm to your device and do not contain viruses. Cookies serve to make our website more user friendly, more effective, and safer. Cookies are small text files that are stored on your device and are saved by your browser.
The majority of cookies used by us are so-called ‘session cookies’, which are automatically deleted after your visit on our website. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser when you next visit our website.
You can set up your browser to notify you of cookies, to permit cookies only in isolated instances, to accept cookies only in certain cases, or to always disallow cookies, as well as to activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.
Cookies that are necessary for electronic communication processes or for the provision of specific functions desired by you (e.g., shopping cart function) are saved on the basis of art. 6 § 1 lit. f GDPR. The website operator has a justified interest in the saving of cookies for the technically error-free and optimized provision of their services. Unless a respective permission was requested (e.g. consent to the saving of cookies), processing occurs solely on the basis of art. 6 §1 lit. a GDPR; consent may be withdrawn at any time.
If additional cookies are saved (e.g., cookies for the analysis of your web behavior), they will be treated separately in this data protection statement.
Server log files
The provider of these sites captures and automatically saves data that your browser transfers to us, which includes:
- Browser type and version
- Operating system in use
- Referrer URL
- Hostname of the accessing device
- Time of server request
- IP address
This data is not merged with other data sources.
The collection of this data occurs on the basis of art. 6 §1 lit. f GDPR. The website operator has a justified interest in the technically error free presentation and optimization of their website. Sever log files must be captured for this.
When sending us a request via contact form, the information provided by you in the form, including your contact details, are saved by us for the purpose of processing your request and in case of follow-up questions. We do not pass on this data to third parties without your consent.
This data is processed on the basis of art. 6 §1 lit. b GDPR, provided that your request relates to the fulfilment of a contract or that processing is required for the completion of pre-contractual measures. In all other cases, processing occurs on the basis of our justified interest in the effective processing of requests sent to us (art. 6 §1 lit. f GDPR), or on the basis of your consent (art. 6 §1 lit. a GDPR) if requested by us.
The data entered by you in the contact form remains with us until you request its deletion, withdraw your consent to saving, or the purpose of data retention ceases to apply (e.g., after fully responding to your request). Legally binding requirements – especially retention duties – remain untouched.
E-mail, telephone, or telefax enquiries
If you contact us by e-mail, telephone, or telefax, your enquiry – inclusive of all connected personal data (e.g., name, content of enquiry) – will be saved and processed by us for the purpose of responding to your request. We do not pass on this data to third parties without your consent.
This data is processed on the basis of art. 6 §1 lit. b GDPR, provided that your request relates to the fulfilment of a contract or that processing is required for the completion of pre-contractual measures. In all other cases, processing occurs on the basis of your consent (art. 6 §1 lit. a GDPR) and/or our justified interest (art. 6 §1 lit. f GDPR), since we have a justified interest in the effective processing of enquiries directed towards us.
The data transferred to us by you via contact requests remains with us until you request its deletion, withdraw your consent, or until the purpose for the data retention ceases to apply (e.g., upon complete processing of your request). Applicable legal requirements – especially legal retention duties – remain untouched.
Comment function on this website
For the comment function on this website, we save not only your comment, but also information on the time that comment was created, your e-mail address, and – unless posted anonymously – your user name.
Saving of your IP address
Our comment function saves the IP address of users that create comments. Since we do not assess comments on this website for authorization purposes, we require this data to start legal proceedings against the creator in case of violations such as insults or propaganda.
Subscribing to comments
As a user of these websites, you can subscribe to comments upon registering. You will receive a confirmation e-mail to verify that you are the owner of the e-mail address provided. You can unsubscribe from this function at any time via a link in the info e-mails. In this case, the data provided by you as part of your comments subscription will be deleted; if you have provided this data for other purposes and in other places (e.g., newsletter subscription), we will retain it.
Duration of comment retention
Comments and related data (e.g., IP addresses) are saved and remain on this website until the commented content has been deleted entirely, or the until the comment has to be deleted for legal reasons (e.g., insulting comments).
Comments are saved on the basis of your agreement (art. 6 §1 lit. a GDPR). You can withdraw your consent at any time. Sending us an informal e-mail notification is sufficient for this. The legality of prior data processing remains untouched by the withdrawal.
5. Analysis tools and advertisement
This website uses functions of the web analysis service Google Analytics. The provider is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called “cookies”. Cookies are small text files that are stored on your device and enable an analysis of your use of a website. The information on your use of this website generated through cookies are normally transmitted to a Google server in the USA, where they are saved.
The saving of Google Analytics cookies and use of this analysis tool occurs on the basis of art. 6 §1 lit. f GDPR. The website provider has a justified interest in the analysis of user behavior to optimize their web services and advertisement. Unless your consent was requested respectively (e.g., agreement to the saving of cookies), processing occurs exclusively on the basis of art. 6 §1 lit. a GDPR; consent can be withdrawn at any time.
On this website, we activated the function for IP anonymization. This means that Google will shorten your IP address within member states of the European Union and other signatories of the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional circumstances will your full IP address be transmitted to Google servers in the USA and shortened there. As instructed by the provider of this website, Google will use this information to analyze your use of this website, compile reports on website activities, and provide additional services to the website provider related to website and internet use. The IP address transmitted by your browser for Google Analytics will not be merged with other data held by Google.
You can prevent the saving of cookies through relevant settings of your browser software; however, upon doing so, you may not be able to use all functions of this website. Moreover, you can prevent the collection of data linked to your website use (incl. your IP address) by Google through the cookie, as well as the processing of this data by Google, by downloading and installing the available browser plug-in via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objecting to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data for future visits of this website: deactivate Google Analytics.
More information on the treatment of user data at Google Analytics can be found in the Google data protection statement: https://support.google.com/analytics/answer/6004245?hl=de.
We have a data processing contract with Google and fully adhere to the strict regulations of the German data protection authorities when using Google Analytics.
Demographic characteristics and Google Analytics
This website uses the Google Analytics function “demographic characteristics”. This enables the creation of reports containing information on the age, gender, and interest of website visitors. This data stems from interest-specific advertisements by Google, as well as from visitor data from third parties. This data cannot be linked to a specific person. You can deactivate this function at any time via the ad settings in your Google account, or object to the collection of your data by Google Analytics as described in the section “objection to data collection”.
Duration of retention
Data at user or event level saved by Google that is linked to cookies, user recognition (e.g., user ID) or ad IDs (e.g., double-click cookies, Android ad ID), is anonymized or deleted after 14 months. Details on this are available via the following link: https://support.google.com/analytics/answer/7667196?hl=de
This website uses the WordPress tool Stats to statistically analyze user access. The provider is the Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.
“WordPress Stats” cookies remain on your device until your delete them.
The saving of “WordPress Stats” cookies and use of this analysis tool occur on the basis of art. 6 §1 lit. f GDPR. The website provider has a justified interest in the anonymized analysis of user behavior to optimize their web services and advertisement. Unless consent to this was requested (e.g., agreement to the saving of cookies), processing occurs exclusively on the basis of art. 6 §1 lit. a GDPR; consent can be withdrawn at any time.
Via the following link, you can object to the collection and use of your data by setting an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.
When deleting cookies on your device, you need to re-activate the opt-out cookie.
Google Analytics Remarketing
This website uses the functions of Google Analytics Remarketing in connection with the cross-device functions of Google Ads und Google DoubleClick. The provider is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
This function enables the connection of the advertisement target groups created with Google Analytics Remarketing with the cross-device functions of Google Ads and Google DoubleClick. Through this, interest-specific, personalized advertisement that has been tailored to you based on your past use and web behavior on a device (e.g., smartphone), can also be displayed on another device of yours (e.g., tablet or PC).
If you have consented to this, Google connects your web and app browser history with your Google account. This way, every device on which you are logged in with your Google account can display the same, personalized advertisement.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device ads.
You can permanently object to cross-device remarketing/targeting by deactivating personalized advertisement; follow this link to do so: https://www.google.com/settings/ads/onweb/.
The linking of collected data in your Google account occurs exclusively on the basis of your consent that you can give to and withdraw from Google (art. 6 §1 lit. a GDPR). In case of data collection processes that are not linked to your Google account (e.g., because you do not have a Google account or have objected to the linking), data collection occurs on the basis of art. 6 §1 lit. f GDPR. The justified interest applies as the website provider has an interest in the anonymized analysis of website visitors for advertisement purposes.
Further information and data protection regulations can be found in the data protection statement of Google: https://policies.google.com/technologies/ads?hl=de.
Google Ads and Google conversion tracking
This website uses Google Ads. Google Ads is an online advertisement program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Together with Google Ads, we use so-called conversion tracking. When clicking on an ad posted by Google, a cookie for conversion tracking is placed. Cookies are small text filed that your internet browser saves on the computer of the user. These cookies expire after 30 days and do not serve for the personal identification of the user. When a user visits pages of this website and the cookie has not yet expired, Google and the website provider can recognize that the user clicked on the ad and was forwarded to this website.
Each Google Ads customer receives a different cookie. The cookies cannot be traced via the websites by Google Ads customers. The information collected with conversion cookies serves to compile conversion statistics for Google Ads customers that have chosen to use conversion tracking. The customers learn about the total amount of users that have clicked on their ads and were transferred to a website with a conversion tracking tag. They do not receive information through which users could be personally identified. If you do not want to take part in the tracking, you can object to this use by deactivating the cookie for Google conversion tracking in your internet browser settings. This will prevent your inclusion in conversion tracking statistics.
The saving of conversion cookies and use of this tracking tool take place on the basis of art. 6 §1 lit. f GDPR. The website provider has a justified interest in the analysis of user behavior to optimize their web services and advertisement. Unless consent was requested respectively (e.g., agreement to the saving of cookies) processing occurs exclusively on the basis of art. 6 §1 lit. a GDPR; consent can be withdrawn at any time.
More information on Google Ads and Google conversion tracking can be found in the data protection statement of Google: https://policies.google.com/privacy?hl=de.
This website uses the user action tool Pixel by Facebook for conversion measuring. The provider of this service is the Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is transmitted to the USA and third countries.
This helps us understand the behavior of website visitors after they were transferred to this website upon clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook adverts for statistical and market research purposes, and to optimize future advertising.
For the provider of this website, the data collected is anonymous. We cannot trace the identify of users. However, the data is saved and processed by Facebook, enabling Facebook to link it to the respective user profile and use it for its own advertising according to the Facebook data protection guidelines. This enables Facebook to place adverts on Facebook sites, but also outside of Facebook. This use of the data cannot be influenced by the provider of this website.
Facebook Pixel is used on the basis of art. 6 §1 lit. f GDPR. The website provider has a justified interest in effective advertising including through social media. Unless consent was requested respectively (e.g., agreement to the saving of cookies), processing occurs exclusively on the basis of art. 6 §1 lit. a GDPR; consent can be withdrawn at any time.
You can find further information on the protection of your privacy in the data protection guidelines of Facebook: https://de-de.facebook.com/about/privacy/.
You can also deactivate the remarketing function “Custom Audiences” in your advertisement settings under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen You must be signed in to Facebook to do so.
If you do not have a Facebook account, you can deactivate use-based Facebook advertisement on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
If you wish to receive the Newsletter offered on this website, we require your e-mail address, as well as information that will enable us to verify that you are the owner of the e-mail address provided and consent to receiving the newsletter. Additional data is not collected, or only on a voluntary basis. This data will only be used for the sending of the requested information and will not be passed on to third parties..
The data provided by in the newsletter sign-up form is only processed with your consent (art. 6 §1 lit. a GDPR). You can withdraw your consent to the saving of the data, your e-mail address, and their use for the dispatch of the newsletter at any time via the “unsubscribe” link in the newsletter. The legality of data processing up to this point remains untouched by the withdrawal.
The data provided by you for the purpose of receiving the newsletter will be saved by us or the newsletter service until you unsubscribe from the newsletter, at which point they will be deleted from the newsletter distribution list. Data saved by us for other purposes remains untouched by this.
Upon unsubscribing from the newsletter, your e-mail address may be added to a blacklist by us or the newsletter service to prevent future mailings. The blacklist data will only be used for this purpose and will not be merged with other data. This is both in your interest and in our interest to adhere to the legal requirements concerning the dispatch of newsletters (justified interest under art. 6 §1 lit. f GDPR). The saving on the blacklist is not time limited. You can object to this provided that your interest outweighs our justified interest.
This website uses the services of MailChimp for the distribution of newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service with which the dispatch of newsletters is organized and analyzed. When you provide data for the purpose of receiving our newsletter (e.g., e-mail address), they will be saved on the servers of MailChimp in the USA.
MailChimp has an “EU-US Privacy Shield” certification. The “Privacy Shield” is an agreement between the European Union (EU) and the USA that seeks to guarantee the adherence to European data protection standards in the USA.
Using MailChimp enables us to analyze our newsletter campaigns. When you open an e-mail sent with MailChimp, a file contained in the e-mail (so-called web beacon) links with the MailChimp servers in the USA. This helps determine whether a newsletter message was opened, and which links were clicked on. Technical information (e.g., time of opening, IP address, browser type, operating system) is also collected. This information cannot be linked with the newsletter recipient. It only serves for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better align future newsletters with the interest of the recipients.
If you wish to avoid an analysis by MailChimp, you need to unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe from our newsletter on our website.
The data is processed on the basis of your agreement (art. 6 §1 lit. a GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The legality of data processing up to this point remains untouched by the withdrawal.
The data provided by you for the purpose of receiving our newsletter that is saved by us or the newsletter service will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data saved by us for other purposes will not be touched by this.
Upon unsubscribing from the newsletter, your e-mail address may be added to a blacklist by us or the newsletter service to prevent future mailings. The blacklist data will only be used for this purpose and will not be merged with other data. This is both in your interest and in our interest to adhere to the legal requirements concerning the dispatch of newsletters (justified interest under art. 6 §1 lit. f GDPR). The saving on the blacklist is not time limited.You can object to this provided that your interest outweighs our justified interest.
Further information can be found in the data protection statement of MailChimp: https://mailchimp.com/legal/terms/.
Data processing agreement
We have a so-called data processing agreement with MailChil, which obligates MailChimp to protect the data of our customers and to not pass it on to third parties.
7. Plugins und Tools
YouTube with extended data protection
This website includes YouTube videos. The operator of these pages in the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, this mode ensures that YouTube does not save visitor information before they watch a video. The transmission of data to YouTube partners, however, is not necessarily prevented by the extended data protection mode. This is how YouTube – regardless of whether you watch a video – creates a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to YouTube servers is created. The YouTube server is informed, which of our webpages you visited. If you are logged into you YouTube account, you allow YouTube to link your web behavior to your personal profile. You can prevent this by logging out of your YouTube account in advance.
In addition, YouTube can save various cookies on your device upon starting a video. With these cookies, YouTube can gain information on visitors of this website. Among other things, such information is used to create video statistics, improve user friendliness, and prevent misuse. The cookies remain on your device until you delete them.
Additional data processing could be initiated when you start a YouTube video. We do not have any influence over these processes.
The use of YouTube is in the interest of an appealing presentation of our online services. This constitutes a justified interest under art. 6 §1 lit. f GDPR. Unless consent was requested respectively (e.g., agreement to the saving of cookies), processing occurs on the bases of art. 6§ 1 lit. a GDPR; consent can be withdrawn at any time.
More information on data protection at YouTube can be found in the YouTube data protection statement under: https://policies.google.com/privacy?hl=de.
Google Web Fonts
For the coherent presentation of fonts, this website uses so-called web fonts, which are provided by Google. Upon accessing a website, your browser downloads the required web fonts in your browser cache in order to correctly display texts and fonts.
For this purpose, the browser used by you must connect with Google servers. Thereby, Google is informed that this website was accessed via your IP address. Google Web Fonts is used in the interest of a coherent and appealing presentation of our online services. This constitutes a justified interest in the sense of art. 6§ 1 lit. f GDPR.
If your browser does not support web fonts, your computer will use a standard font.
More information on Google Web Fonts can be found under https://developers.google.com/fonts/faq and in the Google data protection statement: https://policies.google.com/privacy?hl=de.
Google Maps (with consent)
This website uses the map service Google Maps via an API. The provider is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To guarantee data protection on this website, Google Maps has been deactivated for your first visit on this website. A direct connection to the servers of Google will only be activated when you do so yourself (consent under art. 6 §1 lit. a GDPR). This way, we prevent the transfer of your data to Google upon your first visit.
Upon activation, Google Maps will save your IP address, which will normally be transmitted to a Google server in the USA, where it will be saved. Upon activation of Google Maps, the provider of this website has no influence on this data transfer.
More information on the treatment of user data can be found in the Google data protection statement: https://www.google.de/intl/de/policies/privacy/.
We use “Google reCAPTCHA” (in the following referred to as “reCAPTCHA”) on this website. The provider is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With reCAPTCHA, we seek to assess whether data entry on this website (e.g., via a contact form) is done by a human or an automated program. For this purpose, reCAPTCHA analyses the behavior of the website user based on different aspects. The analysis starts automatically when the website visitor enters the website. For the analysis, reCAPTCHA analyses different information (e.g., IP address, duration of the website visit, mouse movements). The data captured by the analysis is transmitted to Google.
The reCAPTCHA analyses happen entirely in the background. Website visitors are not notified that an analysis is conducted.
The data is processed on the basis of art. 6§ 1 lit. f GDPR. The website provider has a justified interest to protect its web services from abusive, automated spying activities and SPAM.
8. Own services
Treatment of applicant data
We give you the opportunity to apply to work for us (e.g., via e-mail, mail, or online application forms). In the following, we inform you about the scope, purpose, and use of the personal data collected as part of the application process. We ensure you that the collection, processing, and use of your data occurs in accordance with the applicable data protection law and all additional applicable legal requirements, and that your data is treated strictly confidential.
Scope and purpose of the data collection
When you send us an application, we process your personal data contained in it (e.g., contact and communication data, application documents, interview notes, etc.), as far as it is required for our decision and reasoning for employment. The legal basis for this is §26 Federal Data Protection Act (BDSG-new) (data processing for employment-related purposes), art. 6 §1 lit. b GDPR (general contract approach) and – if you have given your consent – art. 6 §1 lit. a GDPR. Consent can be withdrawn at any time. Your personal data is only transmitted to persons within our company that are processing your application.
If your application was successful, the data provided by you will be saved in our data processing systems for the purpose of an employment relationship on the basis of §26 BDSG-new and art. 6 §1 lit. b GDPR.
Data retention duration
If we do not make you an employment offer, you decline it, or withdraw your application, we reserve the right to retain the data transmitted by you for up to six months after completion of the application process (declining or withdrawal of application) on the basis of our justified interest (art. 6 §1 lit. f GDPR). Afterwards, the data is deleted and physical application documents deleted. The retention serves, in particular, documentation purposes in case of a legal dispute. If it becomes apparent that the data will be needed after the duration of 6 months (e.g., due to an anticipated legal dispute), the data will only be deleted once the purpose for further retention ceases to exist.
A longer retention is also possible if you have provided your respective agreement (art. 6 §1 lit. a GDPR), or if legal retention duties prevent the deletion.
Inclusion in the applicants’ pool
If we do not offer you a position, you have the option to be included in our applicants’ pool. In case of inclusion, all documents and information from your application will be transferred to the applicants’ pool to contact you when matching vacancies arise.
Inclusion in the applicants’ pool occurs only upon your explicit consent (art. 6 §1 lit. a GDPR). The provision of consent is voluntary and has no relation to your ongoing application process. The applicant can revoke their consent at any time. In this case, the data stored in the applicants’ pool is permanently deleted unless legal duties to retain these apply.
The data from the applicants’ pool is permanently deleted two years after the provision of consent at the latest.