Data privacy statement
The responsible office in accordance with data privacy laws, in particular the EU General Data Protection Regulation (GDPR), is:
Your data subject rights
You can exercise the following rights at any time via the contact data specified for our data protection officer:
- Information on your data that we have stored and its processing
- Correction of incorrect personal data
- Deletion of your data that we have stored
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations
- Objection to the processing of your data by us
- Data transferability if you have consented to the data processing or have concluded a contract with us.
If you have given us consent, you can revoke this at any time with effect for the future.
You can contact the regulatory authority that is responsible for you with a complaint at any time. Your responsible regulatory authority depends on the federal state where you live, where you work and where the alleged violation occurred. You will find a list of regulatory authorities (for non-public sector) with addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Purposes of data processing by the responsible office and third parties
We process your personal data only for the purposes named in this data privacy statement. Your personal data will not be transferred to third parties for purposes other than those named. We will only disclose your personal data to third parties if:
- You have given your express consent to this
- The processing is necessary for the performance of a contract with you
- The processing is necessary for the fulfilment of a legal obligation
The processing is necessary to safeguard justified interests and there is no reason to assume that you have a legitimate prevailing interest in nondisclosure of your data.
Recording of general information upon visiting our websiteWhen you access our website, information of a general nature is automatically recorded by means of a cookie. This information (server log files) contains, for instance, the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. This involves exclusively information that does not contain any reference to your person.
- Ensuring a trouble-free connection set-up to the website
- Ensuring trouble-free usage of our website
- Evaluating the system security and stability
- For further administrative purposes
The processing of your personal data is based on our justified interest resulting from the aforementioned purposes for data acquisition. We will not use your data to establish a reference to your person. The only recipients of data are the responsible office and possibly persons processing an order.
We may evaluate this kind of anonymous information in statistical form with the aim of optimising our Internet site and the technology behind it.
Like many other websites, we also use what are known as “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. They allow us to automatically receive certain data, for example, IP address, browser used, operating system and your connection to the Internet.
Cookies cannot be used to start programs or to transfer viruses to your computer. Using the information contained in the cookies, we can simplify navigation for you and enable correct display of our web pages.
The data we acquire will not be forwarded to third parties nor shall a link to personal data be created without your consent.
To protect the security of your data during transfer, we use encryption methods (e.g. SSL) corresponding with the current state-of-the-art via HTTPS.
If you contact us by email or via contact form with questions of any nature, you grant implicit consent to us contacting you. You will need to enter a valid email address for this purpose. This is used to assign the request and the subsequent reply. Input of other data is optional. The entries you make are stored for the purpose of processing the request as well as for possible subsequent questions. Personal data are automatically deleted once the enquiry you have made has been dealt with.
As an additional measure or as an alternative to the browser add-on, you can suppress tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device during this procedure. Tracking of this website and the browser by Google Analytics will be prevented as long as the cookie remains installed in your browser.
Social plug-ins from the providers listed below are used on our websites. The plug-ins are identified by their logos.
In certain circumstances, information, which may also include personal data, is sent to the service provider via these plug-ins and possibly used by them. We prevent unnoticed and unwanted recording and transfer of data to the service provider by means of a two-click solution. If you want to activate a social plug-in, you first have to activate it by clicking the corresponding switch. The recording of information and its transfer to the service provider is also only initiated once you activate the plug-in in this way. We ourselves do not record any personal data using the social plug-ins or through their usage.
We do not have any influence on which data an activated plug-in records and how the data are used by the provider. We currently have to assume that a direct connection to the provider’s services is set up and at least the IP address and device-related information are recorded and used. The service provider may also try to install cookies on the computer used. Please refer to the data privacy information of the respective service provider to find out which specific data are recorded during this process and how they are used. Please note: if you are simultaneously logged into Facebook, Facebook can identify you as a visitor of a particular page.
We have incorporated social media buttons from the following companies into our website:
Instagram: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
We use “Google reCAPTCHA” (henceforth “reCAPTCHA”) on our web pages. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is used to check whether the data entered on our website (e.g. in a contact form) was input by a human or by an automated program. reCAPTCHA does this by analysing the behaviour of website visitors by means of various characteristics. This analysis starts automatically as soon as website visitors access the website. In the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, time spent on the website by the website visitor and mouse movements performed by the user). The data recorded during the analysis are forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is being performed. The data is processed in accordance with Art. 6 Para. 1 (f) of the GDPR. The website operator has a justified interest in protecting their web services against spyware and spam. You will find further information on Google reCAPTCHA as well as the Google data privacy statement via the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
Data privacy for job applications and during the job application process
The party responsible for the processing collects and processes the personal data of job applicants for the period of the job application procedure. The processing can also occur using electronic means. This is particularly the case when an applicant transfers corresponding application documents via electronic means to the person responsible for processing. If the person responsible for processing concludes an employment contract with an applicant, the transferred data are stored for the purpose of conducting the employment relationship while observing legal regulations. If an employment contract is not concluded with the applicant by the person responsible for processing, the application documents will be deleted three months after the rejection decision is announced as long as no other justified interests of the person responsible for processing stand in the way of deleting it. Other justified interests in this sense are, for example, a burden of proof in proceedings in accordance with Germany’s General Act on Equal Treatment (AGG).
Changes to our data privacy regulations
We reserve the right to adapt this data privacy statement in line with changing legal requirements or in order to implement changes to our services, e.g. upon introduction of new services. The new data privacy statement then applies to your next visit.
Questions for the data privacy officer