The content on our website has been prepared with the utmost care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content. As a service provider, we are responsible for our own content on this website in accordance with Section 7(1) of the German Telemedia Act (TMG) and general laws.
Privacy
Policy
The ECA
Foundation has entrusted Concept Heidelberg GmbH with administrative services.
1. An
overview of data protection
General
information
The
following information will provide you with an easy to navigate overview of
what will happen with your personal data when you visit this website. The term
“personal data” comprises all data that can be used to personally identify you.
For detailed information about the subject matter of data protection, please
consult our Data Protection Declaration, which we have included beneath this
copy.
Data
recording on this website
Who is the
responsible party for the recording of data on this website (i.e., the
“controller”)?
The data on
this website is processed by the operator of the website, whose contact
information is available under section “Information about the responsible party
(referred to as the “controller” in the GDPR)” in this Privacy Policy.
How do we
record your data?
We collect
your data as a result of your sharing of your data with us. This may, for
instance be information you enter into our contact form.
Other data
shall be recorded by our IT systems automatically or after you consent to its
recording during your website visit. This data comprises primarily technical
information (e.g., web browser, operating system, or time the site was
accessed). This information is recorded automatically when you access this
website.
What are
the purposes we use your data for?
A portion
of the information is generated to guarantee the error free provision of the
website. Other data may be used to analyse your user patterns.
What rights
do you have as far as your information is concerned?
You have
the right to receive information about the source, recipients, and purposes of
your archived personal data at any time without having to pay a fee for such
disclosures. You also have the right to demand that your data are rectified or
eradicated. If you have consented to data processing, you have the option to
revoke this consent at any time, which shall affect all future data processing.
Moreover, you have the right to demand that the processing of your data be
restricted under certain circumstances. Furthermore, you have the right to log
a complaint with the competent supervising agency.
Please do
not hesitate to contact us at any time if you have questions about this or any
other data protection related issues.
Analysis
tools and tools provided by third parties
There is a
possibility that your browsing patterns will be statistically analysed when
your visit this website.
Such
analyses are performed primarily with what we refer to as analysis programs.
For detailed information about these analysis programs please consult our Data
Protection Declaration below.
2. Data
processing for events’ participation
When you
register for one of our events, we collect the data requested in the forms. At
the time of ordering or registering on our website, the following data is also
stored via the website, which we describe below in this privacy policy.
The
processing of your data serves the purpose of initiating and/or processing the
respective participation contract. The collection of other personal data during
the registration process serves to prevent misuse of the services. We use your
first and last name and the name of your company to print a name badge, which
we will give you when you check in on site. We also use a QR code on the name
badges. This QR code contains the following personal data:
First and
last name
Company
name
Email
address
The name
badge is visible to other participants and makes it easier to establish contact
and improve communication between participants, speakers, and exhibitors. By
using your mobile phone camera, anyone who comes close enough to your name
badge can scan the QR code at any time.
The legal
basis for printing name badges with QR codes is Art. 6(1)(b) of the German Data
Protection Act (DSGVO). Our assessment has shown that our legitimate interest
outweighs your interests or fundamental rights and freedoms. (Simplification of
processes, promotion of networking, reduction of manual data entry including
environmental impact, and optimization of the event so that not only we, but
also exhibitors, speakers, and ultimately the participants benefit from it.)
Right of
withdrawal / Alternative without QR code
Affected persons have the right to object to the processing
of their personal data in connection with the use of QR codes at any time. In
this case, it is possible to have a name badge without a QR code created at the
information desk on site. The revocation does not result in any further
disadvantages for the affected person (only the purposes pursued with the QR
code will not take place). The remaining personal data collected during
registration is processed on the basis of legitimate interests pursuant to Art.
6(1)(b) of the German Data Protection Act (DSGVO). Our legitimate interest here
is to prevent misuse of our services, our web server or mail server, or our
email address.
Disclosure of participant data to exhibitors
As part of our major events, we provide exhibitors
exclusively with an electronic overview of participants in advance.
This overview contains only the first names, last names, and
companies of the registered participants. The aforementioned participant
information is transmitted on the basis of a legitimate interest pursuant to
Art. 6(1)(b) of the German Data Protection Act (DSGVO) in order to enable
content-related and organizational preparation for the event. Advance knowledge
of the participating persons is necessary for this purpose, as information at
the company level alone does not allow for the same level of targeted technical
preparation in a professional event context. (Follow-up discussions, initial
contact discussions, etc.)
Exhibitors are expressly prohibited from using the data to
contact visitors before or after the event, for advertising purposes, or for
disclosure to third parties. The data may only be used for this event and must
be irrevocably deleted after it has ended.
To object, simply send an informal message to datenschutz@concept-heidelberg.de.
3. Hosting
We are hosting the content of our website at the following
provider:
External Hosting
This website is hosted externally. Personal data collected
on this website are stored on the servers of the host.
These may include, but are not limited to, IP addresses,
contact requests, metadata and communications, contract information, contact
information, names, web page access, and other data generated through a web
site.
The external hosting serves the purpose of fulfilling the
contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in
the interest of secure, fast, and efficient provision of our online services by
a professional provider (Art. 6(1)(f) GDPR). If appropriate consent has been obtained,
the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR
and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the
access to information in the user's end device (e.g., device fingerprinting)
within the meaning of the TTDSG. This consent can be revoked at any time.
Our host(s) will only process your data to the extent
necessary to fulfil its performance obligations and to follow our instructions
with respect to such data.
We are using the following host(s):
IXTENSA GmbH & Co. KG
Nibelungenstraße 449
64686 Lautertal (Odenwald)
Data processing
We have concluded a data processing agreement (DPA) for the
use of the above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website visitors
only based on our instructions and in compliance with the GDPR.
4. General information and mandatory information
Data protection
The operators of this website and its pages take the
protection of your personal data very seriously.
Hence, we handle your personal data as confidential
information and in compliance with the statutory data protection regulations
and this Data Protection Declaration. Whenever you use this website, a variety
of personal information will be collected. Personal data comprises data that
can be used to personally identify you. This Data Protection Declaration
explains which data we collect as well as the purposes we use this data for. It
also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the
Internet (i.e., through e-mail communications) may be prone to security gaps.
It is not possible to completely protect data against third-party access.
Information about the responsible party (referred to as the
“controller” in the GDPR)
The data processing controller on this website is:
Concept Heidelberg GmbH
Rischerstr. 8
69123 Heidelberg
Germany
Phone: +49 (0) 6221/84440
E-mail: info@concept-heidelberg.de
The controller is the natural person or legal entity that
single-handedly or jointly with others makes decisions as to the purposes of
and resources for the processing of personal data (e.g., names, e-mail
addresses, etc.).
Storage duration
Unless a more specific storage period has been specified in
this privacy policy, your personal data will remain with us until the purpose
for which it was collected no longer applies. If you assert a justified request
for deletion or revoke your consent to data processing, your data will be
deleted, unless we have other legally permissible reasons for storing your
personal data (e.g., tax or commercial law retention periods); in the latter
case, the deletion will take place after these reasons cease to apply.
General information on the legal basis for the data
processing on this website
If you have consented to data processing, we process your
personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if
special categories of data are processed according to Art. 9 (1) DSGVO. In the
case of explicit consent to the transfer of personal data to third countries,
the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented
to the storage of cookies or to the access to information in your end device
(e.g., via device fingerprinting), the data processing is additionally based on
§ 25 (1) TTDSG. The consent can be revoked at any time. If your data is
required for the fulfilment of a contract or for the implementation of
pre-contractual measures, we process your data on the basis of Art. 6(1)(b)
GDPR.
Furthermore, if your data is required for the fulfilment of
a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR.
Furthermore, the data processing may be carried out on the basis of our legitimate
interest according to Art. 6(1)(f) GDPR. Information on the relevant legal
basis in each individual case is provided in the following paragraphs of this
privacy policy.
Designation of a data protection officer
We have appointed a data protection officer:
Detlef Benesch
Concept Heidelberg GmbH
Rischerstr. 8
69123 Heidelberg
Germany
Phone: +49 (0) 6221/84440
E-mail: datenschutz@concept-heidelberg.de
Information on data transfer to the USA and other non-EU
countries
Among other things, we use tools of companies domiciled in
the United States or other from a data protection perspective non-secure non-EU
countries. If these tools are active, your personal data may potentially be
transferred to these non-EU countries and may be processed there. We must point
out that in these countries, a data protection level that is comparable to that
in the EU cannot be guaranteed. For instance, U.S. enterprises are under a
mandate to release personal data to the security agencies and you as the data
subject do not have any litigation options to defend yourself in court. Hence,
it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may
process, analyse, and permanently archive your personal data for surveillance
purposes. We have no control over these processing activities.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible
only subject to your express consent. You can also revoke at any time any
consent you have already given us. This shall be without prejudice to the
lawfulness of any data collection that occurred prior to your revocation.
You may object to the use of your data for advertising
purposes at any time. Please send your objection to: info@concept-heidelberg.de
Right to object to the collection of data in special cases;
right to object to direct advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART.
6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING
OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS
ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL
BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA
PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR
AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING
PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR
INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE
CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO
ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE
IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR
AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS
ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT
ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE
USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to log a complaint with the competent supervisory
agency
In the event of violations of the GDPR, data subjects are
entitled to log a complaint with a supervisory agency, in particular in the
member state where they usually maintain their domicile, place of work or at
the place where the alleged violation occurred. The right to log a complaint is
in effect regardless of any other administrative or court proceedings available
as legal recourses.
Right to data portability
You have the right to demand that we hand over any data we
automatically process on the basis of your consent or in order to fulfil a
contract be handed over to you or a third party in a commonly used, machine
readable format. If you should demand the direct transfer of the data to
another controller, this will be done only if it is technically feasible.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you
have the right to at any time demand information about your archived personal
data, their source and recipients as well as the purpose of the processing of
your data. You may also have a right to have your data rectified or eradicated.
If you have questions about this subject matter or any other questions about
personal data, please do not hesitate to contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions
as far as the processing of your personal data is concerned. To do so, you may
contact us at any time. The right to demand restriction of processing applies
in the following cases:
In the event that you should dispute the correctness of your
data archived by us, we will usually need some time to verify this claim.
During the time that this investigation is ongoing, you have the right to
demand that we restrict the processing of your personal data.
If the processing of your personal data was/is conducted in
an unlawful manner, you have the option to demand the restriction of the
processing of your data in lieu of demanding the eradication of this data.
If we do not need your personal data any longer and you need
it to exercise, defend or claim legal entitlements, you have the right to demand
the restriction of the processing of your personal data instead of its
eradication.
If you have raised an objection pursuant to Art. 21(1) GDPR,
your rights and our rights will have to be weighed against each other. As long
as it has not been determined whose interests prevail, you have the right to
demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data,
these data – with the exception of their archiving – may be processed only
subject to your consent or to claim, exercise or defend legal entitlements or
to protect the rights of other natural persons or legal entities or for
important public interest reasons cited by the European Union or a member state
of the EU.
SSL and/or TLS encryption
For security reasons and to protect the transmission of
confidential content, such as purchase orders or inquiries you submit to us as
the website operator, this website uses either an SSL or a TLS encryption
program. You can recognize an encrypted connection by checking whether the
address line of the browser switches from “http://” to “https://” and also by
the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit
to us cannot be read by third parties.
Encrypted payment transactions on this website
If you are under an obligation to share your payment
information (e.g. account number if you give us the authority to debit your
bank account) with us after you have entered into a fee-based contract with us,
this information is required to process payments.
Payment transactions using common modes of paying
(Visa/MasterCard, debit to your bank account) are processed exclusively via
encrypted SSL or TLS connections. You can recognize an encrypted connection by
checking whether the address line of the browser switches from “http://” to
“https://” and also by the appearance of the lock icon in the browser line.
If the communication with us is encrypted, third parties
will not be able to read the payment information you share with us.
Rejection of unsolicited e-mails
We herewith object to the use of contact information
published in conjunction with the mandatory information to be provided in our
Site Notice to send us promotional and information material that we have not
expressly requested. The operators of this website and its pages reserve the
express right to take legal action in the event of the unsolicited sending of
promotional information, for instance via SPAM messages.
5. Recording of data on this website
Cookies
Our websites and pages use what the industry refers to as
“cookies.” Cookies are small data packages that do not cause any damage to your
device. They are either stored temporarily for the duration of a session (session
cookies) or they are permanently archived on your device (permanent cookies).
Session cookies are automatically deleted once you terminate your visit.
Permanent cookies remain archived on your device until you actively delete
them, or they are automatically eradicated by your web browser.
In some cases, it is possible that third-party cookies are
stored on your device once you enter our site (third-party cookies). These
cookies enable you or us to take advantage of certain services offered by the
third party (e.g., cookies for the processing of payment services).
Cookies have a variety of functions. Many cookies are
technically essential since certain website functions would not work in the
absence of the cookies (e.g., the shopping cart function or the display of
videos). The purpose of other cookies may be the analysis of user patterns or
the display of promotional messages.
Cookies, which are required for the performance of
electronic communication transactions, or for the provision of certain functions
you want to use (e.g., for the shopping cart function) or those that are
necessary for the optimization (required cookies) of the website (e.g., cookies
that provide measurable insights into the web audience), shall be stored on the
basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The
operator of the website has a legitimate interest in the storage of required
cookies to ensure the technically error free and optimized provision of the
operator’s services. If your consent to the storage of the cookies and similar
recognition technologies has been requested, processing occurs exclusively on
the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this
consent may be revoked at any time.
You have the option to set up your browser in such a manner
that you will be notified any time cookies are placed and to permit the
acceptance of cookies only in specific cases. You may also exclude the
acceptance of cookies in certain cases or in general or activate the delete
function for the automatic eradication of cookies when the browser closes. If
cookies are deactivated, the functions of this website may be limited.
In the event that third-party cookies are used or if cookies
are used for analytical purposes, we will separately notify you in conjunction
with this Data Protection Policy and, if applicable, ask for your consent.
Consent with Usercentrics
This website uses the consent technology of Usercentrics to
obtain your consent to the storage of certain cookies on your device or for the
use of specific technologies, and to document the former in a data protection
compliant manner. The party offering this technology is Usercentrics GmbH,
Sendlinger Straße 7, 80331 München, Germany, website: https://usercentrics.com/
(hereinafter referred to as “Usercentrics”).
Whenever you visit our website, the following personal data
will be transferred to Usercentrics:
Your declaration(s) of consent or your revocation of your
declaration(s) of consent
Your IP address
Information about your browser
Information about your device
The date and time you visited our website
Moreover, Usercentrics shall store a cookie in your browser
to be able to allocate your declaration(s) of consent or any revocations of the
former. The data that are recorded in this manner shall be stored until you ask
us to eradicate them, delete the Usercentrics cookie or until the purpose for
archiving the data no longer exists. This shall be without prejudice to any
mandatory legal retention periods.
Usercentrics uses cookies to obtain the declarations of
consent mandated by law. The legal basis for the use of specific technologies
is Art. 6(1)(c) GDPR.
Data processing
We have concluded a data processing agreement (DPA) for the
use of the above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website visitors
only based on our instructions and in compliance with the GDPR.
Contact form
If you submit inquiries to us via our contact form, the
information provided in the contact form as well as any contact information
provided therein will be stored by us in order to handle your inquiry and in
the event that we have further questions. We will not share this information
without your consent.
The processing of these data is based on Art. 6(1)(b) GDPR,
if your request is related to the execution of a contract or if it is necessary
to carry out pre-contractual measures. In all other cases the processing is
based on our legitimate interest in the effective processing of the requests
addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if
this has been requested; the consent can be revoked at any time.
The information you have entered into the contact form shall
remain with us until you ask us to eradicate the data, revoke your consent to
the archiving of data or if the purpose for which the information is being
archived no longer exists (e.g., after we have concluded our response to your
inquiry). This shall be without prejudice to any mandatory legal provisions, in
particular retention periods.
Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, your request,
including all resulting personal data (name, request) will be stored and
processed by us for the purpose of processing your request. We do not pass
these data on without your consent.
These data are processed on the basis of Art. 6(1)(b) GDPR
if your inquiry is related to the fulfilment of a contract or is required for
the performance of pre-contractual measures. In all other cases, the data are
processed on the basis of our legitimate interest in the effective handling of
inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent
(Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any
time.
The data sent by you to us via contact requests remain with
us until you request us to delete, revoke your consent to the storage or the
purpose for the data storage lapses (e.g. after completion of your request).
Mandatory statutory provisions - in particular statutory
retention periods - remain unaffected.
6. Social media
Facebook
We have integrated elements of the social network Facebook
on this website. The provider of this service is Meta Platforms Ireland
Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s
statement the collected data will be transferred to the USA and other
third-party countries too.
An overview of the Facebook social media elements is
available under the following link:
https://developers.facebook.com/docs/plugins/.
If the social media element has been activated, a direct
connection between your device and the Facebook server will be established. As
a result, Facebook will receive information confirming your visit to this
website with your IP address. If you click on the Facebook Like button while
you are logged into your Facebook account, you can link content of this website
to your Facebook profile. Consequently, Facebook will be able to allocate your
visit to this website to your user account. We have to emphasize that we as the
provider of the website do not receive any information on the content of the
transferred data and its use by Facebook.
For more information, please consult the Data Privacy Policy
of Facebook at: https://de-de.facebook.com/privacy/explanation.
If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6 Sect. 1 lit. a GDPR
and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at
any time. If your consent was not obtained, the use of the service will occur on
the basis of our legitimate interest in making our information as
comprehensively visible as possible on social media.
Insofar as personal data is collected on our website with
the help of the tool described here and forwarded to Facebook, we and Meta Platforms
Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
are jointly responsible for this data processing (Art. 26 DSGVO). The joint
responsibility is limited exclusively to the collection of the data and its
forwarding to Facebook. The processing by Facebook that takes place after the
onward transfer is not part of the joint responsibility. The obligations
incumbent on us jointly have been set out in a joint processing agreement. The
wording of the agreement can be found under:
https://www.facebook.com/legal/controller_addendum. According to this
agreement, we are responsible for providing the privacy information when using
the Facebook tool and for the privacy-secure implementation of the tool on our
website. Facebook is responsible for the data security of Facebook products.
You can assert data subject rights (e.g., requests for information) regarding
data processed by Facebook directly with Facebook. If you assert the data
subject rights with us, we are obliged to forward them to Facebook.
Data transmission to the US is based on the Standard
Contractual Clauses (SCC) of the European Commission. Details can be found
here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381 and
https://www.facebook.com/policy.php.
LinkedIn
This website uses elements of the LinkedIn network. The
provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place,
Dublin 2, Ireland.
Any time you access a page of this website that contains
elements of LinkedIn, a connection to LinkedIn’s servers is established.
LinkedIn is notified that you have visited this website with your IP address.
If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn
account at the time, LinkedIn will be in a position to allocate your visit to
this website to your user account. We have to point out that we as the provider
of the websites do not have any knowledge of the content of the transferred
data and its use by LinkedIn.
If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25
TTDSG (German Telecommunications Act). Such consent may be revoked at any time.
If your consent was not obtained, the use of the service will occur on the
basis of our legitimate interest in making our information as comprehensively
visible as possible on social media.
Data transmission to the US is based on the Standard
Contractual Clauses (SCC) of the European Commission. Details can be found
here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en.
For further information on this subject, please consult
LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.
XING
This website uses elements of the XING network. The provider
is the New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Any time one of our sites/pages that contains elements of
XING is accessed, a connection with XING’s servers is established. As far as we
know, this does not result in the archiving of any personal data. In
particular, the service does not store any IP addresses or analyse user
patterns.
If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25
TTDSG (German Telecommunications Act). Such consent may be revoked at any time.
If your consent was not obtained, the use of the service will occur on the
basis of our legitimate interest in making our information as comprehensively
visible as possible on social media.
For more information on data protection and the XING share
button please consult the Data Protection Declaration of Xing at:
https://www.xing.com/app/share?op=data_protection.
7. Analysis tools and advertising
Google Tag Manager
We use the Google Tag Manager. The provider is Google
Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate
tracking or statistical tools and other technologies on our website. The Google
Tag Manager itself does not create any user profiles, does not store cookies,
and does not carry out any independent analyses. It only manages and runs the
tools integrated via it. However, the Google Tag Manager does collect your IP
address, which may also be transferred to Google’s parent company in the United
States.
The Google Tag Manager is used on the basis of Art. 6(1)(f)
GDPR. The website operator has a legitimate interest in the quick and
uncomplicated integration and administration of various tools on his website.
If appropriate consent has been obtained, the processing is carried out
exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the
consent includes the storage of cookies or the access to information in the
user’s end device (e.g., device fingerprinting) within the meaning of the
TTDSG. This consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service
Google Analytics. The provider of this service is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the
behavior patterns of website visitors. To that end, the website operator
receives a variety of user data, such as pages accessed, time spent on the
page, the utilized operating system and the user’s origin. This data is
assigned to the respective end device of the user.
An assignment to a user-ID does not take place.
Furthermore, Google Analytics allows us to record your mouse
and scroll movements and clicks, among other things. Google Analytics uses
various modeling approaches to augment the collected data sets and uses machine
learning technologies in data analysis.
Google Analytics uses technologies that make the recognition
of the user for the purpose of analyzing the user behavior patterns (e.g.,
cookies or device fingerprinting). The website use information recorded by
Google is, as a rule transferred to a Google server in the United States, where
it is stored.
The use of these services occurs on the basis of your
consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time.
Data transmission to the US is based on the Standard
Contractual Clauses (SCC) of the European Commission. Details can be found
here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
On this website, we have activated the IP anonymization
function. As a result, your IP address will be
abbreviated by Google within the member states of the
European Union or in other states that have ratified the Convention on the
European Economic Area prior to its transmission to the United States. The full
IP address will be transmitted to one of Google’s servers in the United States
and abbreviated there only in exceptional cases. On behalf of the operator of
this website, Google shall use this information to analyse your use of this
website to generate reports on website activities and to render other services
to the operator of this website that are related to the use of the website and
the Internet. The IP address transmitted in conjunction with Google Analytics
from your browser shall not be merged with other data in Google’s possession.
Browser plug-in
You can prevent the recording and processing of your data by
Google by downloading and installing the browser plugin available under the
following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by
Google Analytics, please consult Google’s Data Privacy Declaration at:
https://support.google.com/analytics/answer/6004245?hl=en.
Demographic parameters provided by Google Analytics
This website uses the “demographic characteristics” function
of Google Analytics, to be able to display to the website visitor compatible
ads within the Google advertising network. This allows reports to be created
that contain information about the age, gender, and interests of the website
visitors. The sources of this information are interest-related advertising by
Google as well as visitor data obtained from third-party providers. This data
cannot be allocated to a specific individual. You have the option to deactivate
this function at any time by making pertinent settings changes for advertising
in your Google account or you can generally prohibit the recording of your data
by Google Analytics as explained in section “Objection to the recording of
data”.
Contract data processing
We have executed a contract data processing agreement with
Google and are implementing the stringent provisions of the German data
protection agencies to the fullest when using Google Analytics.
Google Analytics E-Commerce-Tracking
This website uses the “E-Commerce Tracking” function of
Google Analytics. With the assistance of E-Commerce Tracking, the website
operator is in a position to analyze the purchasing patterns of website
visitors with the aim of improving the operator’s online marketing campaigns.
In this context, information, such as the orders placed, the average order
values, shipping costs and the time from viewing the product to making the
purchasing decision are tracked. These data may be consolidated by Google under
a transaction ID, which is allocated to the respective user or the user’s
device.
Google Ads
The website operator uses Google Ads. Google Ads is an
online promotional program of Google Ireland Limited (“Google”), Gordon House,
Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search
engine or on third-party websites, if the user enters certain search terms into
Google (keyword targeting). It is also possible to place targeted ads based on
the user data Google has in its possession (e.g., location data and interests;
target group targeting). As the website operator, we can analyse these data
quantitatively, for instance by analysing which search terms resulted in the
display of our ads and how many ads led to respective clicks.
The use of these services occurs on the basis of your
consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time.
Data transmission to the US is based on the Standard
Contractual Clauses (SCC) of the European Commission. Details can be found
here:
https://policies.google.com/privacy/frameworks and
https://privacy.google.com/businesses/controllerterms/mccs/.
Google Ads Remarketing
This website uses the functions of Google Ads Remarketing.
The provider of these solutions is Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign people who
interact with our online offering to specific target groups in order to
subsequently display interest-based advertising to them in the Google
advertising network (remarketing or retargeting).
Moreover, it is possible to link the advertising target
groups generated with Google Ads Remarketing to device encompassing functions
of Google. This makes it possible to display interest-based customized
advertising messages, depending on your prior usage and browsing patterns on a
device (e.g., cell phone) in a manner tailored to you as well as on any of your
devices (e.g., tablet or PC).
If you have a Google account, you have the option to object
to personalized advertising under the following link:
https://www.google.com/settings/ads/onweb/.
The use of these services occurs on the basis of your
consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time.
For further information and the pertinent data protection
regulations, please consult the Data Privacy Policies of Google at:
https://policies.google.com/technologies/ads?hl=en.
Formation of Target Groups with Customer Reconciliation
For the formation of target groups, we use, among other
things, the Google Ads Remarketing customer reconciliation feature. To achieve
this, we transfer certain customer data (e.g., email addresses) from our
customer lists to Google. If the respective customers are Google users and are
logged into their Google accounts, matching advertising messages within the
Google network (e.g., YouTube, Gmail or in a search engine) are displayed for
them to view.
Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider
of this service is Google Ireland Limited (“Google”), Gordon House, Barrow
Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in
a position to recognize whether the user has completed certain actions. For
instance, we can analyze the how frequently which buttons on our website have
been clicked and which products are reviewed or purchased with particular
frequency. The purpose of this information is to compile conversion statistics.
We learn how many users have clicked on our ads and which actions they have
completed. We do not receive any information that would allow us to personally
identify the users. Google as such uses cookies or comparable recognition
technologies for identification purposes.
The use of these services occurs on the basis of your
consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time.
For more information about Google Conversion Tracking,
please review Google’s data protection policy at:
https://policies.google.com/privacy?hl=en
Google DoubleClick
This website uses features of Google DoubleClick. The
provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street,
Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to show you interest-based ads across
the Google Network. Advertisements can be tailored to the interests of the
viewer using DoubleClick. For example, our ads may appear in Google search
results or in banners associated with DoubleClick.
To be able to display interest adequate promotional content
to users, DoubleClick must recognize the
respective visitor so that it can allocate the websites
visited, the clicks and other user pattern information to the user. To do this,
DoubleClick deploys cookies or comparable recognition technologies (e.g.,
device fingerprinting). The recorded information is consolidated into a
pseudonym user profile so that the respective user can be shown interest adequate
advertising.
The use of these services occurs on the basis of your
consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time.
For further information on how to object to the
advertisements displayed by Google, please see the following links:
https://policies.google.com/technologies/ads and
https://adssettings.google.com/authenticated.
“Screaming Frog SEO Spider“
The Screaming Frog SEO Spider is a software that analyses
web pages and collects information that is used to optimize search engine
findability. A merge with the user data of Google Analytics (see 6.) is given.
“Screaming Frog Log File Analyser“
The Screaming Frog SEO Log File Analyser analyses server log
files to analyse search bot data and behaviour for this website.
Screaming Frog Ltd, 6 Greys Road, Henley-on-Thames,
Oxfordshire, RG9 1RY. UK
Privacy Policy: https://www.screamingfrog.co.uk/disclaimer/
“Searchmetrics“
Searchmetrics is a web-based software that analyzes web
pages and collects information that is used to optimize search engine
findability. A merge with the user data of Google Analytics (see 12. ) is
given.
Searchmetrics GmbH, Greifswalder Straße 212, 10405 Berlin
Privacy Policy:
https://www.searchmetrics.com/de/datenschutz/
8. Newsletter
Newsletter data
If you would like to subscribe to the newsletter offered on
this website, we will need from you an e-mail address as well as information
that allow us to verify that you are the owner of the e-mail address provided
and consent to the receipt of the newsletter. No further data shall be
collected or shall be collected only on a voluntary basis. We shall use such
data only for the sending of the requested information and shall not share such
data with any third parties.
The processing of the information entered into the
newsletter subscription form shall occur exclusively on the basis of your
consent (Art. 6(1)(a) GDPR). You may revoke the consent you have given to the
archiving of data, the e-mail address, and the use of this information for the
sending of the newsletter at any time, for instance by clicking on the
“Unsubscribe” link in the newsletter. This shall be without prejudice to the
lawfulness of any data processing transactions that have taken place to date.
The data deposited with us for the purpose of subscribing to
the newsletter will be stored by us until you unsubscribe from the newsletter
or the newsletter service provider and deleted from the newsletter distribution
list after you unsubscribe from the newsletter or after the purpose has ceased
to apply. We reserve the right to delete or block e-mail addresses from our
newsletter distribution list at our own discretion within the scope of our
legitimate interest in accordance with Art. 6(1)(f) GDPR.
Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list,
your e-mail address may be stored by us or the newsletter service provider in a
blacklist, if such action is necessary to prevent future mailings. The data
from the blacklist is used only for this purpose and not merged with other
data. This serves both your interest and our interest in complying with the legal
requirements when sending newsletters (legitimate interest within the meaning
of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite.
You may object to the storage if your interests outweigh our
legitimate interest.
E-mailing platform for newsletters
We make use of a newsletter platform to send out our
newsletters. The newsletter platform “rapidmail” is a service provided by
rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany, whose
privacy policy can be viewed here: https://www.rapidmail.de/datenschutz/
(German)
This processor is governed by a contract as per Art 28 (3)
GDPR.
The processor processes data only to fulfil their
contractual obligations. They do not use the data for their own purposes or
pass it on to third parties.
9. Plug-ins and Tools
YouTube
This website embeds videos of the website YouTube. The
website operator is Google Ireland Limited (“Google”), Gordon House, Barrow
Street, Dublin 4, Ireland.
If you visit a page on this website into which a YouTube has
been embedded, a connection with YouTube’s servers will be established. As a
result, the YouTube server will be notified, which of our pages you have
visited.
Furthermore, YouTube will be able to place various cookies
on your device or comparable technologies for recognition (e.g. device
fingerprinting). In this way YouTube will be able to obtain information about
this website’s visitors. Among other things, this information will be used to
generate video statistics with the aim of improving the user friendliness of
the site and to prevent attempts to commit fraud.
If you are logged into your YouTube account while you visit
our site, you enable YouTube to directly allocate your browsing patterns to
your personal profile. You have the option to prevent this by logging out of
your YouTube account.
The use of YouTube is based on our interest in presenting
our online content in an appealing manner.
Pursuant to Art. 6(1)(f) GDPR, this is a legitimate
interest. If appropriate consent has been obtained, the processing is carried
out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar
the consent includes the storage of cookies or the access to information in the
user’s end device (e.g., device fingerprinting) within the meaning of the
TTDSG. This consent can be revoked at any time.
For more information on how YouTube handles user data,
please consult the YouTube Data Privacy Policy under:
https://policies.google.com/privacy?hl=en.
Vimeo
This website uses plug-ins of the video portal Vimeo. The provider
is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of the pages on our website into which a
Vimeo video has been integrated, a connection to Vimeo’s servers will be
established. As a consequence, the Vimeo server will receive information as to
which of our pages you have visited. Moreover, Vimeo will receive your IP
address. This will also happen if you are not logged into Vimeo or do not have
an account with Vimeo. The information recorded by Vimeo will be transmitted to
Vimeo’s server in the United States.
If you are logged into your Vimeo account, you enable Vimeo
to directly allocate your browsing patterns to your personal profile. You can
prevent this by logging out of your Vimeo account.
Vimeo uses cookies or comparable recognition technologies
(e.g. device fingerprinting) to recognize website visitors.
The use of Vimeo is based on our interest in presenting our
online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a
legitimate interest. If appropriate consent has been obtained, the processing
is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1)
TTDSG, insofar the consent includes the storage of cookies or the access to
information in the user’s end device (e.g., device fingerprinting) within the
meaning of the TTDSG. This consent can be revoked at any time.
Data transmission to the US is based on the Standard
Contractual Clauses (SCC) of the European Commission and, according to Vimeo,
on “legitimate business interests”. Details can be found here:
https://vimeo.com/privacy.
For more information on how Vimeo handles user data, please
consult the Vimeo Data Privacy Policy under: https://vimeo.com/privacy.
Google Maps
This website uses the mapping service Google Maps. The
provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street,
Dublin 4, Ireland.
To enable the use of the Google Maps features, your IP
address must be stored. As a rule, this information is transferred to one of Google’s
servers in the United States, where it is archived. The operator of this
website has no control over the data transfer. In case Google Maps has been
activated, Google has the option to use Google Fonts for the purpose of the
uniform depiction of fonts. When you access Google Maps, your browser will load
the required web fonts into your browser cache, to correctly display text and
fonts.
We use Google Maps to present our online content in an
appealing manner and to make the locations disclosed on our website easy to
find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR.
If appropriate consent has been obtained, the processing is carried out
exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the
consent includes the storage of cookies or the access to information in the
user’s end device (e.g., device fingerprinting) within the meaning of the
TTDSG. This consent can be revoked at any time.
Data transmission to the US is based on the Standard
Contractual Clauses (SCC) of the European Commission. Details can be found
here:
https://privacy.google.com/businesses/gdprcontrollerterms/
and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on the handling of user data, please review
Google’s Data Privacy Declaration under:
https://policies.google.com/privacy?hl=en.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as
“reCAPTCHA”) on this website. The provider is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data
entered on this website (e.g., information entered into a contact form) is
being provided by a human user or by an automated program. To determine this,
reCAPTCHA analyses the behaviour of the website visitors based on a variety of
parameters. This analysis is triggered automatically as soon as the website
visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of
data (e.g., IP address, time the website visitor spent on the site or cursor
movements initiated by the user). The data tracked during such analyses are
forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website
visitors are not alerted that an analysis is underway.
Data are stored and analyzed on the basis of Art. 6(1)(f)
GDPR. The website operator has a legitimate interest in the protection of the
operator’s websites against abusive automated spying and against SPAM. If
appropriate consent has been obtained, the processing is carried out
exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the
consent includes the storage of cookies or the access to information in the
user’s end device (e.g., device fingerprinting) within the meaning of the
TTDSG. This consent can be revoked at any time.
For more information about Google reCAPTCHA please refer to
the Google Data Privacy Declaration and Terms Of Use under the following links:
https://policies.google.com/privacy?hl=en and
https://policies.google.com/terms?hl=en.
10. eCommerce and payment service providers
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract
data for the establishment, content arrangement and modification of our
contractual relationships. Data with personal references to the use of this
website (usage data) will be collected, processed, and used only if this is
necessary to enable the user to use our services or required for billing
purposes. The legal basis for these processes is Art. 6(1)(b) GDPR.
The collected customer data shall be deleted upon completion
of the order or termination of the business relationship and upon expiration of
any existing statutory archiving periods. This shall be without prejudice to
any statutory archiving periods.
Data transfer upon closing of contracts for online stores,
retailers, and the shipment of merchandise
Whenever you order merchandise from us, we will share your
personal data with the transportation company entrusted with the delivery as
well as the payment service commissioned to handle the payment transactions.
Only the data these respective service providers require to meet their
obligations will be shared. The legal basis for this sharing is Art. 6 (1)(b)
GDPR, which permits the processing of data for the fulfilment of contractual or
pre-contractual obligations. If you give us your respective consent pursuant to
Art. 6 (1)(a) GDPR, we will share your email address with the transportation
company entrusted with the delivery so that this company can notify you on the
shipping status for your order via email. You have the option to revoke your
consent at any time.
Data transfer upon closing of contracts for services and
digital content
We share personal data with third parties only if this is
necessary in conjunction with the handling of the contract; for instance, with
the financial institution tasked with the processing of payments.
Any further transfer of data shall not occur or shall only
occur if you have expressly consented to the transfer. Any sharing of your data
with third parties in the absence of your express consent, for instance for
advertising purposes, shall not occur.
The basis for the processing of data is Art. 6(1)(b) GDPR,
which permits the processing of data for the fulfilment of a contract or for
pre-contractual actions.
Payment services
We integrate payment services of third-party companies on
our website. When you make a purchase from us, your payment data (e.g. name,
payment amount, bank account details, credit card number) are processed by the
payment service provider for the purpose of payment processing. For these
transactions, the respective contractual and data protection provisions of the
respective providers apply. The use of the payment service providers is based
on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth,
convenient, and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your
consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis
for data processing; consent may be revoked at any time for the future.
We use the following Payment service provider:
Nexi Germany GmbH, Helfmann-Park 7, 65760 Eschborn
Datenschutzerklärung lesen | Nexi
11. Online-based Audio and Video Conferences (Conference
tools)
Data processing
We use online conference tools, among other things, for
communication with our customers. The tools we use are listed in detail below.
If you communicate with us by video or audio conference using the Internet,
your personal data will be collected and processed by the provider of the
respective conference tool and by us. The conferencing tools collect all
information that you provide/access to use the tools (email address and/or your
phone number). Furthermore, the conference tools process the duration of the
conference, start and end (time) of participation in the conference, number of
participants and other “context information” related to the communication
process (metadata).
Furthermore, the provider of the tool processes all the
technical data required for the processing of the online communication. This
includes, in particular, IP addresses, MAC addresses, device IDs, device type,
operating system type and version, client version, camera type, microphone or
loudspeaker and the type of connection.
Should content be exchanged, uploaded, or otherwise made
available within the tool, it is also stored on the servers of the tool
provider. Such content includes, but is not limited to, cloud recordings, chat/
instant messages, voicemail uploaded photos and videos, files, whiteboards, and
other information shared while using the service.
Please note that we do not have complete influence on the
data processing procedures of the tools used. Our possibilities are largely
determined by the corporate policy of the respective provider. Further
information on data processing by the conference tools can be found in the data
protection declarations of the tools used, and which we have listed below this
text.
Purpose and legal bases
The conference tools are used to communicate with
prospective or existing contractual partners or to offer certain services to
our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to
generally simplify and accelerate communication with us or our company
(legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent
has been requested, the tools in question will be used on the basis of this
consent; the consent may be revoked at any time with effect from that date.
Duration of storage
Data collected directly by us via the video and conference
tools will be deleted from our systems immediately after you request us to
delete it, revoke your consent to storage, or the reason for storing the data
no longer applies. Stored cookies remain on your end device until you delete
them.
Mandatory legal retention periods remain unaffected.
We have no influence on the duration of storage of your data
that is stored by the operators of the conference tools for their own purposes.
For details, please directly contact the operators of the conference tools.
Conference tools used
We employ the following conference tools:
Webex
We use Webex. The provider of this service is the Webex
Communications Deutschland GmbH, Hansaallee 249 c/o Cisco Systems GmbH, 40549
Düsseldorf, Germany.
It cannot be ruled out that data processed via Webex will be
transferred to third-party countries (e.g. USA).
Webex has Binding Corporate Rules (BCR) which have been
approved by the Dutch, Polish, Spanish, and other relevant European Data
Protection Authorities. These are binding corporate rules that legitimize the
transfer of data within the company to third countries outside the EU and EEA:
https://www.cisco.com/c/de_de/about/trust-center/data-protection-and-privacy-policy.html
and
https://konferenzen.telekom.de/fileadmin/Redaktion/conference/ciscowebex/Webex_Compliance_Deutsch_V1.0.pdf.
For details on data processing, please refer to Webex’s
privacy policy:
https://www.cisco.com/c/de_de/about/legal/privacy-full.html.
Data processing
We have concluded a data processing agreement (DPA) for the
use of the above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website visitors
only based on our instructions and in compliance with the GDPR.
12. Other Processors and third parties
If personal data is disclosed or transferred to another
company (processor or third party) in order to fulfil contractual obligations
or safeguard our legitimate interests (e.g. webhosting), this is always based
on the legal provisions of Art. 6 (1) GDPR (e.g. fulfilling contractual
obligations), on your consent or due to a legal obligation.
If third parties are contracted to process data on our
behalf, these contracts are based on Art. 28 GDPR.
The following companies have been contracted to process data
on our behalf:
Content Management System
„Seminar eins.5 - Software für Seminarverwaltung und
-organisation“
EDV-Kommunikation Strassner e.K., Lucas-Cranach-Straße 6,
68623 Lampertheim, Germany
The company’s privacy policy can be viewed here:
https://www.strassner.biz/datenschutzerklaerung/
System administration
GMP Software GmbH & C. KG, Heinrich-Lanz-Straße 22,
67259 Beindersheim, Germany
The company’s privacy policy can be viewed here:
http://www.gmp-software.eu/datenschutz_e.html
Post mailing service provider
LANG Industrie Dienst GmbH - Fulfillment, Lübecker Str. 4-6,
69181 Leimen, Germany
The company’s privacy policy can be viewed here:
https://lang-fulfillment.group/datenschutz
Deutsche Post AG, Eupener Str. 80, 50933 Cologne, Germany
The company’s privacy policy can be viewed here:
https://www.deutschepost.de/de/f/footer/datenschutz.html
Plastic card printing
Abt Plastikkarten GmbH, Gartenstr. 2, 78343 Gaienhofen,
Germany
The company’s privacy policy can be viewed here:
https://abt-plastikkarten.de/datenschutz/
The processors process data only to fulfil their contractual
obligations. They do not use the data for their own purposes or pass it on to
third parties.
13. Custom Services
Handling applicant data
We offer website visitors the opportunity to submit job
applications to us (e.g., via e-mail, via postal services on by submitting the
online job application form). Below, we will brief you on the scope, purpose
and use of the personal data collected from you in conjunction with the
application process. We assure you that the collection, processing, and use of
your data will occur in compliance with the applicable data privacy rights and
all other statutory provisions and that your data will always be treated as
strictly confidential.
Scope and purpose of the collection of data
If you submit a job application to us, we will process any
affiliated personal data (e.g., contact and communications data, application
documents, notes taken during job interviews, etc.), if they are required to
make a decision concerning the establishment or an employment relationship. The
legal grounds for the aforementioned are § 26 BDSG according to German Law
(Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General
Contract Negotiations) and – provided you have given us your consent – Art.
6(1)(a) GDPR. You may revoke any consent given at any time. Within our company,
your personal data will only be shared with individuals who are involved in the
processing of your job application.
If your job application should result in your recruitment,
the data you have submitted will be archived on the grounds of § 26 BDSG and
Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship
in our data processing system.
Data Archiving Period
If we are unable to make you a job offer or you reject a job
offer or withdraw your application, we reserve the right to retain the data you
have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for
up to 6 months from the end of the application procedure (rejection or
withdrawal of the application).
Afterwards the data will be deleted, and the physical
application documents will be destroyed. The storage serves in particular as
evidence in the event of a legal dispute. If it is evident that the data will
be required after the expiry of the 6-month period (e.g., due to an impending
or pending legal dispute), deletion will only take place when the purpose for
further storage no longer applies.
Longer storage may also take place if you have given your
agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements
preclude the deletion.
Image Credits & Photo Rights
Unless otherwise noted, the images, graphics, renderings, and visual content used on this website are sourced from our own productions, commissioned photo and media productions, and licensed image databases, in particular Adobe Stock (including former Fotolia content) and iStock.com.
Their use is governed by the applicable license terms of the respective providers or by the rights of use granted by photographers, partners, and service providers.
In the context of presenting events, projects, and references, photographs may be published in which individuals are recognizable. Such publication is carried out in compliance with applicable copyright and data protection regulations, in particular based on consent granted, contractual agreements, or legitimate interests pursuant to Article 6(1)(f) of the GDPR for public relations and the documentation of events.
Where required by licensing terms, copyright notices are listed directly on the respective medium, in the context of the publication, or collectively within this website.
Individual visual content may also include digital visualizations, 3D renderings, or AI-generated images for illustrative purposes. These serve exclusively for design purposes.
References, Brands & Logos
Project examples and references displayed on this website
