1. Data protection at a glance
The following notes provide a simple overview of how we handle your personal data when you visit our website. Personal data is all data by means of which you can be personally identified. Detailed information concerning data protection can be found in this data protection declaration below.
This data protection declaration provides information concerning the type, scope and purpose of the processing of personal data within our online service and its associated websites, functions and content, as well as external online presences such as our social media profile. In relation to the terms used such as "processing" or "controller", we wish to refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Essential legal basis
In accordance with Article 13 GDPR, we are providing you with information concerning the legal basis of the data processing by us. Should the legal basis not be named in the data protection declaration, the following applies: The legal basis for the obtaining of consent is Article 6 Paragraph 1 Letter a) and Article 7 GDPR, the legal basis for the processing in order to fulfil our services and carry out contractual measures, as well as respond to queries is Article 6 Paragraph 1 Letter b) GDPR, the legal basis of the processing for the fulfilment of our contractual obligations is Article 6 Paragraph 1 Letter c) GDPR and the legal basis of the processing in order to safeguard our legitimate interests is Article 6 Paragraph 1 Letter f) GDPR. In case that vital interests of the data subject or another natural person make the processing of personal data necessary, the legal basis is Article 6 Paragraph 1 Letter d) GDPR.
Data recording on our website
Who is responsible for the data recording on this website? The data processing on this website is undertaken by the website operator. The contact details of the website operator can be found in the legal notice of this website.
How do we record your data?
On the one hand, data is gathered when you disclose it to us. This can include data which you enter into a contact form. Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (for example Internet browser, operating system or time of accessing the site). The recording of this data takes place automatically when you visit our website.
What do we use your data for?
Part of the data is gathered in order to ensure that the website can be provided without errors. Other data can be used in order to analyse your surfing behaviour.
What rights do you have in relation to your data?
At all times, you have the right to receive free-of-charge information concerning the origin, recipients and purposes of your saved personal data. You also have the right to request the correction, blocking or deletion of this data. You can contact us via the address in the legal notice at any time if you have any further queries concerning data protection. You also have the right to complain to the competent supervisory authority.
- You have the right to request confirmation as to whether data relating to you is processed and to receive information concerning this data, as well as further information and a copy of this data in accordance with Article 15 GDPR.
- In accordance with Article 16 GDPR, you have the right to request completion of the data relating to you or to have incorrect data relating to you corrected.
- In accordance with Article 17 GDPR, you have the right to request that data relating to you be immediately deleted or, alternatively, you have the right in accordance with Article 18 GDPR to request that the processing of the data be restricted.
- You have the right under Article 20 GDPR to request receipt of the data relating to you which you have provided to us and to request its transfer to another controller.
- In addition, in accordance with Article 77 GDPR, you have the right to submit a complaint to the competent supervisory authority.
Children and young people
As a rule, persons under the age of 16 should not send us personal data without the agreement of their parents or guardians. We also wish to expressly point out that we do not explicitly request, collect or pass personal data of children and young people onto third parties.
Analysis tools and tools of third party providers
When visiting websites, your surfing behaviour can be statistically evaluated. This primarily takes place by means of cookies and with so-called analysis programs. The analysis of your surfing behaviour generally takes place anonymously; you cannot be traced by your surfing behaviour. You can object to this analysis or prevent it by not using certain tools. You can find detailed information relating to this in the data protection declaration below. You can object to this analysis. We will inform you of your objection options in this data protection declaration.
Links to third party sites
When visiting the website, content which is linked to third party websites may be displayed. The operator has no access to the cookies or other functions which are used by third party sites and the operator cannot monitor these either. Such third party sites do not come under the data protection provisions of the operator.
2. General notice and obligatory information
The operators of these sites take the protection of your personal data extremely seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, as well as in line with this data protection declaration.
When you visit this website, various personal data is gathered. Personal data is data by means of which you can be personally identified. This data protection declaration explains what data we gather and the purposes for which we use it. It also explains how and for what purpose this takes place.
Types of data processed:
- Core data (for example name, address)
- Contact data (for example email, telephone numbers)
- Content data (for example text entries, photographs, videos)
- Usage data (for example websites visited, interest in content, access times)
- Meta/communication data (for example device information, IP address)
We wish to point out that data transfer via the Internet (for example when communicating by email) can represent security risks. It is not possible to fully protect the data against third party access.
Information concerning the controller
The controller for the data processing on this website is:
Nürtinger Straße 19
Tel: +49 (0)7024-9702-0
The controller is the natural or legal person which takes decisions alone or with others concerning the purpose and means of the processing of personal data (for example name, email address etc).
Revocation of your consent to the processing of data
Many data processing procedures are only possible with your express consent. You can revoke consent which has already been issued at any time. In order to do so, an informal notification to us by email suffices. The lawfulness of the data processing which took place prior to the revocation is not affected.
Right to complain to the competent supervisory authority
In case of breaches of data protection laws, the data subject has the right to complain to the competent supervisory authority. The competent supervisory authority in matters relating to data protection laws is the State Data Protection Officer of the German State in which our company maintains its place of business. A list of the data protection officers, as well as their contact details can be found via the following link:
Right of data portability
You have the right to receive data which we process in automated form on the basis of your consent or in fulfilment of a contract in an up-to-date, machine readable format or to request that this information be provided to a third party. Should you request direct transfer of the data to another controller, this only takes place if this is technically possible.
SSL and TLS encryption
For reasons connected to security and in order to protect the transfer of confidential information, for example the orders or enquires which you send to us as the website operator, this page uses SSL and TLS encryption. You can recognise an encrypted connection by the address line of your browser changing from "http://“ to "https:// and from the lock symbol in your browser line.
Should the SSL and TLS encryption be activated, the data which you transfer to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable statutory provisions, you have the right at all times to free-of-charge information concerning the personal data stored about your person, its origin and recipient, as well as the purpose of the data processing. You also have the right to correction, blocking or deletion of this data. You can contact us via the address in the legal notice at any time for more information about the above, as well as if you have any further queries concerning personal data.
Objection to advertising emails
The use of contact data which is published under the mandatory legal notice for the sending of unsolicited advertising and information materials is hereby being objected to. The operators of the sites expressly reserve the right to take legal action in case of the unsolicited sending of advertising information, for example through spam emails.
3. Data protection officer
Legally mandated data protection officer
We have appointed an external data protection officer for our company.
Nürtinger Straße 19
4. Data recording on our website
The Internet pages use so-called cookies in part. The purpose of cookies is to make our service more user-friendly, more effective and more secure. Cookies are small text files which are stored on your computer and which are saved by your browser.
Our Internet site does not set any cookies.
Further information concerning cookies:
"Session cookies" are automatically deleted at the end of the visit. Other cookies remain saved on your end device until you delete them. These cookies enable your browser to be recognised next time you visit. You can set your browser in such a way that you are informed of the setting of cookies and only allow cookies in individual cases, that you can prevent the acceptance of cookies in certain cases or generally or that you can activate the automatic deletion of cookies when you close the browser. In case of the deactivation of cookies, the functions of this website may be restricted. Cookies which are necessary in order to carry out the electronic communication process or in order to provide certain functions (such as shopping basket function) are saved on the basis of Article 6 Paragraph 1 Letter f) GDPR. The website operator has a legitimate interest in the saving of the cookies for the defect-free and optimal provision of its services.
Should other cookies be saved (for example cookies which analyse your surfing behaviour), these are treated separately in this data protection declaration.
The hosting services which we use serve the purpose of the provision of the following services: Infrastructure and platform services, computer capacity, storage space and database services, security services and technical maintenance services which we use for the purpose of operation of this online service.
In the course of these services, we and our hosting provider process core data, contact data, content data, contract data, use data, meta and communication data of customers, interested persons and visitors to this online service on the basis of our legitimate interest in an efficient and secure provision of this online service in accordance with Article 6 Paragraph 1 Letter f) GDPR and Article 29 GDPR (conclusion of order processing contract).
Server log files
The provider of the sites automatically gathers and saves information in so-called server log files, which your browser transfers to us automatically. This includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server access
- IP address
This data is not combined with other data sources.
The basis for the data processing is Article 6 Paragraph 1 Letter f) GDPR which permits the processing of the data in order to fulfil a contract or carry out pre-contractual measures.
Getting in touch by email
Should you send us enquires by email, your information, including the contact details provided in the email will be saved by us for the purpose of processing your enquires and in case of any follow up queries. We will not pass this data on without your consent.
Therefore, the processing of the data takes place exclusively on the basis of your consent (Article 6 Paragraph 1 Letter a) GDPR). You can revoke this consent at any time. In order to do so, an informal notification to us by email suffices. The lawfulness of the data processing which took place prior to the revocation is not affected.
The data remains with us until you request its deletion, revoke your consent to the saving or the purpose of the saving of the data ceases to exist (for example once your query has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
Processing of data (customer and contract data)
We only gather, process and use personal data if this is necessary to establish, state the contents of or alter the legal relationship (core data). The basis for the data processing is Article 6 Paragraph 1 Letter b) GDPR which permits the processing of the data in order to fulfil a contract or carry out pre-contractual measures. Personal data concerning the use of our Internet sites (use data) is only gathered, processed and used by us if this is necessary to enable the user to use the service or to bill the user for the use of the service. The customer data which is gathered is deleted once the order is completed or the business relationship has come to an end. Statutory retention periods remain unaffected.
We only transfer personal data to third parties if this is necessary in the course of performance of the contract, for example to companies responsible for the delivery of the goods or to the bank which is responsible for processing payments. No further transfer of the data takes place or is only undertaken if you have expressly agreed to this. Your data is not transferred to third parties without your express consent, for example for advertising purposes. The basis for the data processing is Article 6 Paragraph 1 Letter b) GDPR which permits the processing of the data in order to fulfil a contract or carry out pre-contractual measures. Data transfer at the time of conclusion of the contract for services and digital content. We only transfer personal data to third parties if this is necessary in the course of performance of the contract, for example to the bank which is responsible for processing payments.
5. Plugins and tools
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In order to use the functions of Google Maps, it is necessary to save your IP address. This information is generally transferred to a server of Google in the USA and saved there. The provider of this site has no influence over this data transfer.
The use of Google Maps takes place in the interest of displaying our online services in a targeted manner and to facilitate finding the locations displayed by us on the website. This represents a legitimate interest under Article 6 Paragraph 1 Letter f) GDPR.
Further information concerning the handling of user data can be found in the data protection declaration of Google: https://www.google.de/intl/de/policies/privacy/.
6. Transfers to third countries
Should we process data in a third country (ie outside the EU or EEA) or should this take place whilst using third party services or when disclosing or transferring data to third parties, this only occurs if this is necessary to fulfil our (pre) contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. In reservation of statutory of contractual permits, we only process the data or have the data processed in a third country if the special requirements of Article 44 ff GDPR are met. This means for example that the processing takes place on the basis of special guarantees such as the official recognition of a data protection level which corresponds to that of the EU (for example by means of the "Privacy Shield" for the USA) or in compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
7. Data protection notice for applicants
Purpose of the data processing
The purpose of the data processing is the initiation of employment relationships under Article 88 Paragraph 1, Article 6 Paragraph 1 Letter b) GDPR and § 26 of the German Federal Data Protection Act (BDSG). Data is not passed on to other companies.
Please bear in mind that when sending non-encrypted emails, your data can be viewed by third parties. Misuse cannot be excluded.
Categories of recipients
Data of applicants is not passed on to third parties. As we use service companies for our information technology who are subject to separate secrecy and data protection obligations, access to personal data in this framework cannot be ruled out. Categories of recipients apart from company management and personnel management are service providers for the hosting, support and operation of this website, as well as external advisors. Data is only passed on to authorities if legal regulations which take priority are present. No transfer to third countries takes place.
Duration of the saving and deletion of dataYour data is saved for the duration of the application process; once a decision has been made concerning the outcome of your application or the vacancy has been filled, the data will be saved for 6 months.
Obligation to provide personal data
Without correct information in relation to you, it is not possible to carry out the application process. This can mean that your application cannot be considered during the application process. However, you can get in touch with us at any time.
8 Changes to our data protection provisions
We reserve the right to alter our security and data protection measures at any time, should this become necessary due to technical developments. In these cases, we will also adjust our data protection notices accordingly. Therefore, please take the current version of our data protection declaration as a basis.