Privacy policy

1. Data protection at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. Detailed information about data protection is provided in our privacy policy set out below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. The operator’s contact details can be found in the ‘Information about the controller’ section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, data that you enter in a contact form.

Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time of your visit. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website can be provided without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated through the website, the data provided is also processed for contractual offers, orders or other enquiries about services.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. You furthermore have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about this or any other questions relating to data protection.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be statistically evaluated. This is primarily done using analytics programs.

Detailed information about these analytics programs is provided in the following privacy policy.

2. Hosting

We host the content of our website with the following providers:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter IONOS). When you visit our website, IONOS records various log files, including your IP addresses. Details can be found in IONOS’s privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

IONOS is used on the basis of Art. 6(1)(f) DSGVO. We have a legitimate interest in presenting our website as reliably as possible. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Processing on behalf of the controller

We have concluded a data processing agreement for the use of the service mentioned above. This is an agreement required by data protection law to ensure that the provider processes our website visitors’ personal data only in accordance with our instructions and in compliance with the DSGVO.

External hosting

This website is hosted externally. Personal data collected on this website is stored on the hosting provider’s or providers’ servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website access data and other data generated through a website.

External hosting is used to fulfil our contracts with prospective and existing customers (Art. 6(1)(b) DSGVO) and in the interest of securely, quickly and efficiently providing our online offering through a professional provider (Art. 6(1)(f) DSGVO). Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our hosting provider or providers will process your data only to the extent necessary to fulfil their service obligations and will follow our instructions regarding that data.

We use the following hosting provider:

united-domains GmbH

Gautinger Straße 10

82319 Starnberg

Germany

Processing on behalf of the controller

3. General information and mandatory information

Privacy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

When you use this website, various personal data is collected. Personal data means data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that transmitting data over the internet, for example when communicating by email, may involve security vulnerabilities. Complete protection of data against third-party access is not possible.

Information about the controller

The controller responsible for processing data on this website is:

FONTANA-EOD Consulting & Engineering GmbH
Am Kaninchenberg 5
66453 Gersheim

Telephone: +49 170 3223239
Email: info@fontana-eod.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you submit a valid request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it, such as retention periods under tax or commercial law. In that case, deletion takes place once those grounds no longer apply.

General information on the legal bases for processing data on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO where special categories of data under Art. 9(1) DSGVO are processed. In the case of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) DSGVO. If you have consented to storing cookies or accessing information on your device, for example through device fingerprinting, processing is additionally based on § 25 para. 1 TDDDG. Consent may be withdrawn at any time. If your data is required to perform a contract or take steps prior to entering into a contract, we process it on the basis of Art. 6(1)(b) DSGVO. We also process your data on the basis of Art. 6(1)(c) DSGVO where necessary to fulfil a legal obligation. Processing may furthermore be based on our legitimate interest under Art. 6(1)(f) DSGVO. The following sections of this privacy policy explain the legal bases applicable in each case.

Information on transferring data to third countries without adequate data protection and to US companies that are not DPF-certified

We use, among other things, tools from companies based in third countries without adequate data protection, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to those countries and processed there. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in third countries without adequate data protection.

Please note that the USA, as a safe third country, generally provides a level of data protection comparable to that in the EU. Accordingly, data may be transferred to the USA if the recipient is certified under the EU-US Data Privacy Framework (DPF) or has appropriate additional safeguards. Information on transfers to third countries, including the data recipients, is provided in this privacy policy.

Recipients of personal data

In the course of our business activities, we work with various external parties. This sometimes requires personal data to be transferred to those parties. We disclose personal data to external parties only where necessary to perform a contract, where legally required, for example when disclosing data to tax authorities, where we have a legitimate interest in the disclosure under Art. 6(1)(f) DSGVO, or where another legal basis permits it. When engaging processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, an agreement on joint processing is concluded.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your explicit consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Right to object to data collection in specific cases and to direct marketing (Art. 21 DSGVO)

IF DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) DSGVO, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR THE PROCESSING IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) DSGVO).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21(2) DSGVO).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the DSGVO, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work or the place of the alleged breach. This right is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will take place only where technically feasible.

Access, rectification and deletion

Within the applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, the right to have that data corrected or deleted. You can contact us at any time about this or any other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You can contact us at any time for this purpose. This right applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify it. During that verification, you have the right to request restriction of the processing of your personal data.
If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of deletion.
If we no longer need your personal data but you need it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion.
If you have objected under Art. 21(1) DSGVO, your interests must be weighed against ours. Until it has been established whose interests prevail, you have the right to request restriction of the processing of your personal data.

If processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser address changes from ‘http://’ to ‘https://’ and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, data that you send to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after concluding a contract for which payment is due, you are required to provide us with payment details, such as an account number for a direct debit mandate, those details are needed to process payment.

Payment transactions using the usual payment methods (Visa/MasterCard, direct debit) take place exclusively over an encrypted SSL or TLS connection. You can recognise an encrypted connection when the browser address changes from ‘http://’ to ‘https://’ and by the padlock symbol in your browser’s address bar.

With encrypted communication, payment details that you send to us cannot be read by third parties.

Objection to advertising emails

We hereby object to the use of contact details published as part of the legal notice requirement to send advertising and information materials that have not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Data collection on this website

Cookies

Our website uses cookies. Cookies are small data packets and do not harm your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain stored on your device until you delete them or your web browser deletes them automatically.

Cookies may originate from us (first-party cookies) or from other companies (third-party cookies). Third-party cookies enable certain services provided by other companies to be integrated into websites, such as cookies used to process payment services.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as a shopping basket or displaying videos. Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies required for electronic communication, to provide certain functions you request, such as a shopping basket, or to optimise the website, such as cookies measuring its audience (necessary cookies), are stored on the basis of Art. 6(1)(f) DSGVO unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services without technical errors and in an optimised form. Where consent to storing cookies and comparable recognition technologies has been requested, processing is based exclusively on that consent (Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG); consent may be withdrawn at any time.

You can configure your browser to inform you when cookies are set and allow them only in individual cases, to refuse cookies in specific cases or generally, and to delete cookies automatically when you close the browser. Disabling cookies may restrict this website’s functionality.

This privacy policy explains which cookies and services are used on this website.

Consent with Cookie Notice & Compliance

Our website uses the consent technology provided by Cookie Notice & Compliance for GDPR to obtain your consent to storing certain cookies on your device or using certain technologies, and to document this in compliance with data protection requirements.

The provider of the tool is Hu-manity Rights Inc., 300 Carnegie Center, Suite 150, Princeton, NJ, New Jersey 08540, USA (hereinafter ‘Hu-manity Rights Inc.’). When you enter our website, a connection is established to Hu-manity Rights Inc.’s servers to obtain your consent and other statements concerning the use of cookies. Hu-manity Rights Inc. then stores a cookie in your browser so that your consents or their withdrawal can be associated with you. Data collected in this way is stored until you request its deletion, delete the Hu-manity Rights Inc. cookie yourself, or the purpose of storage no longer applies. Mandatory statutory retention obligations remain unaffected.

Cookie Notice & Compliance for GDPR is used to obtain the consent required by law for the use of cookies. The legal basis is Art. 6(1)(c) DSGVO.

Processing on behalf of the controller

Server log files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not combined with other data sources.

This data is collected on the basis of Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in presenting and optimising its website without technical errors; recording server log files is necessary for this purpose.

Contact form

If you send us enquiries using the contact form, we store the information from the enquiry form, including the contact details you provide, to handle the enquiry and any follow-up questions. We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) DSGVO if your enquiry concerns the performance of a contract or is necessary for steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6(1)(f) DSGVO), or on your consent (Art. 6(1)(a) DSGVO) where requested; consent may be withdrawn at any time.

Data that you enter in the contact form remains with us until you request its deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your enquiry has been fully handled. Mandatory statutory provisions, particularly retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, we store and process your enquiry, including all personal data it contains, such as your name and enquiry, to handle your request. We do not disclose this data without your consent.

Data that you send to us in contact enquiries remains with us until you request its deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your request has been fully handled. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Communication via WhatsApp

We use the WhatsApp instant messaging service, among others, to communicate with our customers and other third parties. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

Communication uses end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from accessing the content of communications. WhatsApp does, however, have access to metadata generated during communication, such as the sender, recipient and time. Please also note that, according to its own statements, WhatsApp shares its users’ personal data with its US-based parent company Meta. Further details on data processing are provided in WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/privacy-policy-eea.

WhatsApp is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, prospective customers and other business and contractual partners (Art. 6(1)(f) DSGVO). Where the relevant consent has been requested, processing is based exclusively on that consent, which may be withdrawn at any time with effect for the future.

The content of communications exchanged between you and us on WhatsApp remains with us until you request its deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your enquiry has been fully handled. Mandatory statutory provisions, particularly retention periods, remain unaffected.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/7735.

We use the WhatsApp Business version of WhatsApp.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

We have configured our WhatsApp accounts so that they do not automatically synchronise data with the address books on the smartphones we use.

We have concluded a data processing agreement with the provider mentioned above.

Google Calendar

You can arrange appointments with us on our website. We use Google Calendar for scheduling. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland (hereinafter ‘Google’).

To book an appointment, enter the requested data and your preferred appointment time in the form provided. The data entered is used to plan and conduct the appointment and, where applicable, for follow-up. Appointment data is stored for us on Google Calendar’s servers. Its privacy policy can be viewed here: https://policies.google.com/privacy.

Data that you enter remains with us until you request its deletion, withdraw your consent to storage, or the purpose of storage no longer applies. Mandatory statutory provisions, particularly retention periods, remain unaffected.

The legal basis for processing is Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in making appointment scheduling with prospective customers and customers as straightforward as possible. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://workspace.google.com/terms/dpa_terms.html and here https://cloud.google.com/terms/sccs.

Processing on behalf of the controller

Registration on this website

You can register on this website to use additional functions. We use the data entered for registration only for the purpose of using the particular offering or service for which you registered. All mandatory information requested during registration must be provided. Otherwise, we will reject the registration.

We use the email address provided during registration to inform you of important changes, such as changes to the scope of the offering or technically necessary changes.

Data entered during registration is processed to perform the usage relationship established by registration and, where applicable, to initiate further contracts (Art. 6(1)(b) DSGVO).

We store data collected during registration for as long as you are registered on this website and delete it afterwards. Statutory retention periods remain unaffected.

5. Social media

Facebook

Elements of the Facebook social network are integrated into this website. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland. According to Facebook, however, the data collected is also transferred to the USA and other third countries.

An overview of Facebook’s social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When the social media element is active, a direct connection is established between your device and Facebook’s server. Facebook thereby receives the information that you have visited this website with your IP address. If you click Facebook’s Like button while logged into your Facebook account, you can link this website’s content to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Facebook uses it. Further information can be found in Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Insofar as the tool described here collects personal data on our website and forwards it to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland are jointly responsible for that processing (Art. 26 DSGVO). Joint responsibility is limited exclusively to collecting the data and forwarding it to Facebook. Facebook’s subsequent processing is not part of that joint responsibility. Our joint obligations are set out in a joint processing agreement. The agreement can be found at: https://www.facebook.com/legal/controller_addendum. Under that agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing it on our website in a manner that meets data protection requirements. Facebook is responsible for the data security of its products. You may exercise your data subject rights, such as access requests, concerning data processed by Facebook directly with Facebook. If you exercise those rights with us, we are obliged to forward them to Facebook.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

X (formerly Twitter)

Functions of X (formerly Twitter) are integrated into this website. These functions are provided by the parent company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The Twitter International Unlimited Company branch, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Irland, is responsible for processing data relating to people living outside the USA.

When the social media element is active, a direct connection is established between your device and X’s server. X (formerly Twitter) thereby receives information about your visit to this website. By using X (formerly Twitter) and its Re-Tweet or Repost function, the websites you visit are linked to your X (formerly Twitter) account and made known to other users. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how X (formerly Twitter) uses it. Further information can be found in X’s (formerly Twitter’s) privacy policy at: https://x.com/de/privacy.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://gdpr.x.com/en/controller-to-controller-transfers.html.

You can change your privacy settings for X (formerly Twitter) in the account settings at https://x.com/settings/account.

Instagram

Functions of the Instagram service are integrated into this website. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland.

When the social media element is active, a direct connection is established between your device and Instagram’s server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link this website’s content to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Instagram uses it.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Insofar as the tool described here collects personal data on our website and forwards it to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland are jointly responsible for that processing (Art. 26 DSGVO). Joint responsibility is limited exclusively to collecting the data and forwarding it to Facebook or Instagram. Their subsequent processing is not part of that joint responsibility. Our joint obligations are set out in a joint processing agreement. The agreement can be found at: https://www.facebook.com/legal/controller_addendum. Under that agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for implementing it on our website in a manner that meets data protection requirements. Facebook is responsible for the data security of Facebook and Instagram products. You may exercise your data subject rights, such as access requests, concerning data processed by Facebook or Instagram directly with Facebook. If you exercise those rights with us, we are obliged to forward them to Facebook.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland.

Whenever a page on this website containing LinkedIn elements is accessed, a connection is established to LinkedIn’s servers. LinkedIn is informed that you have visited this website with your IP address. If you click LinkedIn’s Recommend button while logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how LinkedIn uses it.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

6. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or perform its own analyses. It serves only to manage and deliver the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States.

Google Tag Manager is used on the basis of Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on its website. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Google Analytics

This website uses functions of the Google Analytics web analytics service. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

Google Analytics enables the website operator to analyse website visitors’ behaviour. The operator receives various usage data, such as page views, time spent on the website, operating systems used and users’ origins. This data is combined under a user ID and associated with the website visitor’s device.

Google Analytics also enables us to record, among other things, your mouse movements, scrolling and clicks. Google Analytics furthermore uses various modelling approaches to supplement the datasets collected and uses machine learning technologies to analyse data.

Google Analytics uses technologies that recognise users for the purpose of analysing user behaviour, such as cookies or device fingerprinting. The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

IP anonymisation

Google Analytics IP anonymisation is enabled. Google therefore truncates your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area before transferring it to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of this website’s operator, Google uses this information to evaluate your use of the website, compile reports on website activity and provide the operator with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Google signals

We use Google signals. When you visit our website, Google Analytics collects, among other things, your location, search history, YouTube history and demographic data (visitor data). Google signals can use this data for personalised advertising. If you have a Google account, Google signals links the visitor data to that account and uses it for personalised advertising messages. The data is also used to produce anonymised statistics on our users’ behaviour.

Processing on behalf of the controller

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics e-commerce measurement

This website uses Google Analytics’ e-commerce measurement function. E-commerce measurement enables the website operator to analyse visitors’ purchasing behaviour to improve its online marketing campaigns. Information recorded includes orders placed, average order values, shipping costs and the time between viewing and purchasing a product. Google may combine this data under a transaction ID associated with the respective user or device.

IONOS WebAnalytics

This website uses the analytics services of IONOS WebAnalytics (hereinafter IONOS). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur. IONOS analytics can analyse, among other things, visitor numbers and behaviour, such as page views, duration of visits and bounce rates, visitor sources, meaning the page from which visitors arrive, visitor locations and technical data such as browser and operating system versions. For this purpose, IONOS stores the following data in particular:

Referrer (previously visited website)
Requested web page or file
Browser type and version
Operating system used
Device type used
Time of access
IP address in anonymised form (used only to determine the location of access)

According to IONOS, data is collected in a fully anonymised form, so it cannot be traced back to individual people. IONOS WebAnalytics does not store cookies.

Data is stored and analysed on the basis of Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in statistically analysing user behaviour to optimise both its online offering and advertising. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information on data collection and processing by IONOS WebAnalytics can be found in IONOS’s privacy policy at the following link: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Processing on behalf of the controller

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

Google Ads enables us to display advertisements in Google’s search engine or on third-party websites when users enter certain search terms in Google (keyword targeting). Targeted advertisements can also be displayed on the basis of user data held by Google, such as location data and interests (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms led to our advertisements being displayed and how many advertisements led to clicks.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

Google Ads Remarketing

This website uses Google Ads Remarketing functions. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

Google Ads Remarketing enables us to assign people who interact with our online offering to specific audiences, so that they can subsequently be shown interest-based advertising within Google’s advertising network (remarketing or retargeting).

Advertising audiences created with Google Ads Remarketing can also be linked to Google’s cross-device functions. This allows interest-based, personalised advertising messages tailored to your previous usage and browsing behaviour on one device, such as a mobile phone, to be displayed on another of your devices, such as a tablet or PC.

If you have a Google account, you can object to personalised advertising at the following link: https://adssettings.google.com/anonymous?hl=de.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Further information and the data protection provisions can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Audience creation using Customer Match

We use Google Ads Remarketing’s Customer Match function, among others, to create audiences. We transfer certain customer data, such as email addresses, from our customer lists to Google. If the customers concerned are Google users and are logged into their Google accounts, they are shown suitable advertising messages within Google’s network, for example on YouTube, Gmail or the search engine.

Google conversion tracking

This website uses Google conversion tracking. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

Google conversion tracking enables Google and us to identify whether users have performed certain actions. For example, we can evaluate how often buttons on our website are clicked and which products are viewed or purchased particularly often. This information is used to compile conversion statistics. We learn the total number of users who clicked our advertisements and which actions they performed. We do not receive information that allows us to identify users personally. Google itself uses cookies or comparable recognition technologies for identification.

This service is used on the basis of your consent under Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Further information about Google conversion tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

7. Newsletter

Newsletter data

If you wish to receive the newsletter offered on the website, we require your email address and information allowing us to verify that you own that email address and agree to receive the newsletter. No further data is collected, or it is collected only voluntarily. We use this data exclusively to send the requested information and do not disclose it to third parties.

Data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6(1)(a) DSGVO). You may withdraw your consent to the storage of the data and email address and their use for sending the newsletter at any time, for example through the unsubscribe link in the newsletter. Withdrawal does not affect the lawfulness of processing already carried out.

Data that you provide to us to receive the newsletter is stored by us or the newsletter service provider until you unsubscribe, and is deleted from the newsletter distribution list after you unsubscribe or the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our discretion within the scope of our legitimate interest under Art. 6(1)(f) DSGVO.

Data stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider on a blocklist where necessary to prevent future mailings. The blocklist data is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) DSGVO). Storage on the blocklist is not time-limited. You may object to storage if your interests outweigh our legitimate interest.

Newsletters to existing customers

If you order goods or services from us and provide your email address, we may subsequently use that address to send newsletters, provided we inform you in advance. In that case, the newsletter contains only direct marketing for our own similar goods or services. You can unsubscribe from this newsletter at any time using the link included in every newsletter. In this case, the legal basis for sending the newsletter is Art. 6(1)(f) DSGVO in conjunction with § 7 para. 3 UWG.

After you unsubscribe from the newsletter distribution list, we may store your email address on a blocklist to prevent future mailings to you. The blocklist data is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) DSGVO). Storage on the blocklist is not time-limited. You may object to storage if your interests outweigh our legitimate interest.

8. Plugins and tools

YouTube with enhanced privacy

This website embeds videos from YouTube. The website operator is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

When you visit a page on this website with embedded YouTube content, a connection is established to YouTube’s servers. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalise browsing on YouTube. Advertisements displayed in enhanced privacy mode are not personalised either. No cookies are set in enhanced privacy mode. However, local storage elements are stored in the user’s browser instead. Like cookies, these may contain personal data and be used to recognise users. Details about enhanced privacy mode can be found here: https://support.google.com/youtube/answer/171780.

Activating a YouTube video may trigger further data processing operations over which we have no control.

YouTube is used in the interest of presenting our online offerings attractively. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) DSGVO. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information about data protection at YouTube can be found in its privacy policy at: https://policies.google.com/privacy?hl=de.

Google Fonts (local hosting)

This website uses Google Fonts, provided by Google, to display fonts consistently. The Google Fonts are installed locally. No connection is established to Google’s servers for this purpose.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This website uses the Google Maps mapping service. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland. This service allows us to embed maps on our website.

To use Google Maps functions, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. This website’s provider has no influence over that transfer. When Google Maps is enabled, Google may use Google Fonts to display fonts consistently. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.

Google Maps is used in the interest of presenting our online offerings attractively and making the locations specified on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) DSGVO. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

OpenStreetMap

We use the OpenStreetMap (OSM) mapping service.

We embed OpenStreetMap map material hosted on the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, Großbritannien. The United Kingdom is considered a third country with adequate data protection. This means that its level of data protection corresponds to that in the European Union. When OpenStreetMap maps are used, a connection is established to the OpenStreetMap Foundation’s servers. Your IP address and other information about your behaviour on this website may be forwarded to the OSMF. OpenStreetMap may store cookies in your browser or use comparable recognition technologies for this purpose.

OpenStreetMap is used in the interest of presenting our online offerings attractively and making the locations specified on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) DSGVO. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Google reCAPTCHA

We use Google reCAPTCHA (hereinafter ‘reCAPTCHA’) on this website. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

reCAPTCHA is intended to check whether data entered on this website, for example in a contact form, comes from a person or an automated program. To do this, reCAPTCHA analyses website visitors’ behaviour using various characteristics. This analysis begins automatically as soon as a visitor enters the website. reCAPTCHA evaluates various information, such as the IP address, the time spent on the website and the user’s mouse movements. Data collected during the analysis is forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

Data is stored and analysed on the basis of Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in protecting its online offerings against abusive automated reconnaissance and spam. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO and § 25 para. 1 TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information about Google reCAPTCHA can be found in Google’s privacy policy and terms of service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

9. E-commerce and payment providers

Processing customer and contractual data

We collect, process and use personal customer and contractual data to establish, define and amend our contractual relationships. We collect, process and use personal data concerning the use of this website (usage data) only insofar as necessary to enable users to use the service or to bill for it. The legal basis is Art. 6(1)(b) DSGVO.

Customer data collected is deleted once the assignment has been completed or the business relationship has ended and any applicable statutory retention periods have expired. Statutory retention periods remain unaffected.

Data transfers when concluding contracts for services and digital content

We transfer personal data to third parties only where necessary to perform the contract, for example to the financial institution responsible for processing payments.

No further transfer of data takes place unless you have expressly consented to the transfer. Your data is not disclosed to third parties without explicit consent, for example for advertising purposes.

The basis for processing is Art. 6(1)(b) DSGVO, which permits data processing for the performance of a contract or steps prior to entering into a contract.

Payment services

We integrate payment services from third-party companies into our website. If you make a purchase from us, your payment details, such as your name, payment amount, bank details and credit card number, are processed by the payment service provider to process the payment. The respective providers’ contractual terms and privacy provisions apply to these transactions. Payment service providers are used on the basis of Art. 6(1)(b) DSGVO (contract performance) and in the interest of making payment as smooth, convenient and secure as possible (Art. 6(1)(f) DSGVO). Where your consent is requested for certain actions, Art. 6(1)(a) DSGVO is the legal basis for processing; consent may be withdrawn at any time with effect for the future.

We use the following payment services / payment service providers on this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’).

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay

The provider of this payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple’s privacy policy can be found at: https://www.apple.com/legal/privacy/de-ww/.

Google Pay

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google’s privacy policy can be found here: https://policies.google.com/privacy.

Stripe

The provider for customers within the EU is Stripe Payments Europe, Ltd.,1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland (hereinafter ‘Stripe’).

Transfers of data to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.

Details can be found in Stripe’s privacy policy at the following link: https://stripe.com/de/privacy.

Klarna

The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Schweden (hereinafter ‘Klarna’). Klarna offers various payment options, such as payment by instalments. If you choose to pay with Klarna (the Klarna Checkout solution), Klarna collects various personal data from you. Klarna uses cookies to optimise use of its checkout solution. Details about Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Details can be found in Klarna’s privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

Paydirekt

The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Deutschland (hereinafter ‘Paydirekt’). If you pay using Paydirekt, it collects various transaction data and forwards it to the bank with which you are registered for Paydirekt. In addition to the data required for payment, Paydirekt may collect further data when processing the transaction, such as the delivery address or individual shopping basket items. Paydirekt then authenticates the transaction using the authentication procedure held by the bank for this purpose. The payment amount is subsequently transferred from your account to ours. Neither we nor third parties have access to your account details. Details about paying with Paydirekt can be found in its terms and conditions and privacy policy at: https://www.paydirekt.de/agb/index.html.

Sofort bank transfer

The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 München (hereinafter ‘Sofort GmbH’). With the Sofortüberweisung procedure, we receive real-time payment confirmation from Sofort GmbH and can begin fulfilling our obligations immediately. If you choose Sofortüberweisung as your payment method, you transmit your PIN and a valid TAN to Sofort GmbH, enabling it to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and makes the transfer to us using the TAN you supplied. It then immediately sends us a transaction confirmation. After login, your transactions, overdraft limit and the existence and balances of other accounts are also checked automatically. In addition to the PIN and TAN, the payment details and personal data you enter are transmitted to Sofort GmbH. This personal data includes your first name, surname, address, telephone number or numbers, email address, IP address and any further data required to process payment. Transmitting this data is necessary to establish your identity beyond doubt and prevent attempted fraud. Details about payment by Sofortüberweisung can be found at the following link: https://www.klarna.com/sofort/.

PayOne

The provider of this payment service is PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main (hereinafter ‘PayOne’). Details can be found in PayOne’s privacy policy: https://www.payone.com/DE-de/datenschutz.

giropay

The provider of this payment service is paydirekt GmbH, Stephanstraße 14 – 16, 60313 Frankfurt am Main (hereinafter ‘giropay’).

Details can be found in giropay’s privacy policy: https://www.paydirekt.de/agb/index.html.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgien (hereinafter ‘Mastercard’).

Mastercard may transfer data to its parent company in the USA. Transfers to the USA are based on Mastercard’s Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, Großbritannien (hereinafter ‘VISA’).

The United Kingdom is considered a third country with adequate data protection. This means that its level of data protection corresponds to that in the European Union.

VISA may transfer data to its parent company in the USA. Transfers to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

Further information can be found in VISA’s privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

10. Audio and video conferences

Data processing

We use online conferencing tools, among other means, to communicate with our customers. The specific tools we use are listed below. If you communicate with us over the internet by video or audio conference, your personal data is collected and processed by us and by the provider of the respective conferencing tool.

The conferencing tools collect all data that you provide or use to access them, such as your email address and/or telephone number. They also process the conference duration, the start and end times of your participation, the number of participants and other contextual information relating to the communication (metadata).

The tool provider also processes all technical data required to conduct online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and connection type.

If content is exchanged, uploaded or otherwise made available within the tool, it is also stored on the tool providers’ servers. Such content includes, in particular, cloud recordings, chat or instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the processing operations of the tools we use. Our options depend largely on each provider’s corporate policies. Further information about processing by the conferencing tools can be found in their respective privacy policies, listed below.

Purpose and legal bases

The conferencing tools are used to communicate with prospective or existing contractual partners or to provide certain services to our customers (Art. 6(1)(b) DSGVO). Their use also generally simplifies and speeds up communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) DSGVO). Where consent has been requested, the tools concerned are used on the basis of that consent, which may be withdrawn at any time with effect for the future.

Storage period

Data that we collect directly through video and conferencing tools is deleted from our systems as soon as you request its deletion, withdraw your consent to storage, or the purpose of storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence over the storage period for data that conferencing tool operators store for their own purposes. For details, please contact the conferencing tool operators directly.

Conferencing tools used

We use the following conferencing tools:

TeamViewer

We use TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen. Details on data processing can be found in TeamViewer’s privacy policy: https://www.teamviewer.com/de/datenschutzerklaerung/.

Processing on behalf of the controller

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Irland. Details on data processing can be found in Microsoft Teams’ privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

Processing on behalf of the controller

Google Meet

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Details on data processing can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Processing on behalf of the controller

11. Our own services

Handling applicant data

We offer you the opportunity to apply for a position with us, for example by email, post or an online application form. The following explains the scope, purpose and use of personal data collected during the application process. We assure you that your data is collected, processed and used in accordance with applicable data protection law and all other statutory provisions, and is treated as strictly confidential.

Scope and purpose of data collection

If you send us an application, we process the associated personal data, such as contact and communication data, application documents and notes from interviews, insofar as necessary to decide whether to establish an employment relationship. The legal bases are § 26 BDSG under German law (initiating an employment relationship), Art. 6(1)(b) DSGVO (general steps prior to entering into a contract) and, where you have given consent, Art. 6(1)(a) DSGVO. Consent may be withdrawn at any time. Within our company, your personal data is disclosed exclusively to people involved in handling your application.

If your application is successful, the data you submit is stored in our data processing systems on the basis of § 26 BDSG and Art. 6(1)(b) DSGVO for the purpose of carrying out the employment relationship.

Data retention period

If we cannot offer you a position, you decline an offer, or you withdraw your application, we reserve the right, on the basis of our legitimate interests (Art. 6(1)(f) DSGVO), to retain the data you supplied for up to 6 months after the application process ends (rejection or withdrawal). The data is then deleted and physical application documents are destroyed. Retention serves, in particular, as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period, for example because of threatened or pending litigation, deletion takes place only once the purpose of further retention no longer applies.

Longer retention is also possible if you have given the relevant consent (Art. 6(1)(a) DSGVO), or if statutory retention obligations prevent deletion.

Inclusion in the applicant pool

If we do not offer you a position, it may be possible to include you in our applicant pool. If you are included, all application documents and information are transferred to the applicant pool so that we can contact you about suitable vacancies.

Inclusion in the applicant pool is based exclusively on your explicit consent (Art. 6(1)(a) DSGVO). Giving consent is voluntary and is unrelated to the ongoing application process. The data subject may withdraw consent at any time. In that case, data in the applicant pool is permanently deleted unless statutory grounds for retention apply.

Data in the applicant pool is permanently deleted no later than two years after consent is given.

OneDrive

We have integrated OneDrive into this website. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Irland (hereinafter ‘OneDrive’).

OneDrive enables us to integrate an upload area into our website where you can upload content. Content that you upload is stored on OneDrive’s servers. When you enter our website, a connection to OneDrive is also established, allowing OneDrive to determine that you have visited our website.

OneDrive is used on the basis of Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in a reliable upload area on its website. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO; consent may be withdrawn at any time.

Processing on behalf of the controller

Google Drive

We have integrated Google Drive into this website. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Irland.

Google Drive enables us to integrate an upload area into our website where you can upload content. Content that you upload is stored on Google Drive’s servers. When you enter our website, a connection to Google Drive is also established, allowing Google Drive to determine that you have visited our website.

Google Drive is used on the basis of Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in a reliable upload area on its website. Where the relevant consent has been requested, processing is based exclusively on Art. 6(1)(a) DSGVO; consent may be withdrawn at any time.

The right starting point for your project

Project pathway

Common project questions

Privacy policy

1. Data protection at a glance

General information

Data collection on this website

Who is responsible for collecting data on this website?

How do we collect your data?

What do we use your data for?

What rights do you have regarding your data?

Analytics tools and third-party tools

2. Hosting

IONOS

Processing on behalf of the controller

External hosting

Processing on behalf of the controller

3. General information and mandatory information

Privacy

Information about the controller

Storage period

General information on the legal bases for processing data on this website

Information on transferring data to third countries without adequate data protection and to US companies that are not DPF-certified

Recipients of personal data

Withdrawal of your consent to data processing

Right to object to data collection in specific cases and to direct marketing (Art. 21 DSGVO)

Right to lodge a complaint with the competent supervisory authority

Right to data portability

Access, rectification and deletion

Right to restriction of processing

SSL or TLS encryption

Encrypted payment transactions on this website

Objection to advertising emails

4. Data collection on this website

Cookies

Consent with Cookie Notice & Compliance

Processing on behalf of the controller

Server log files

Contact form

Enquiries by email, telephone or fax

Communication via WhatsApp

Google Calendar

Processing on behalf of the controller

Registration on this website

5. Social media

Facebook

X (formerly Twitter)

Instagram

LinkedIn

6. Analytics tools and advertising

Google Tag Manager

Google Analytics

IP anonymisation

Browser plugin

Google signals

Processing on behalf of the controller

Google Analytics e-commerce measurement

IONOS WebAnalytics

Processing on behalf of the controller

Google Ads

Google Ads Remarketing

Audience creation using Customer Match

Google conversion tracking

7. Newsletter

Newsletter data

Newsletters to existing customers

8. Plugins and tools

YouTube with enhanced privacy

Google Fonts (local hosting)

Google Maps

OpenStreetMap

Google reCAPTCHA

9. E-commerce and payment providers

Processing customer and contractual data

Data transfers when concluding contracts for services and digital content

Payment services

PayPal

Apple Pay

Google Pay

Stripe