1. Data protection overview
Data collection on our website
Who is responsible for data collection on this website?
The data collected on this website are processed by the website provider. The provider’s contact details can be found in the website’s legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure that the website functions properly. Other data can be used to analyse how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose for its collection, at no charge. You also have the right to request that it be rectified, blocked or erased. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent supervisory authorities.
Analytics and third-party tools
BA statistical analysis of your surfing behaviour may take place when you visit our website. This happens primarily using cookies and analytics. Analysis of your surfing behaviour is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy statement.
You can object to this analysis. We will inform you below about how to exercise your options in this regard.
General information and mandatory information
The providers of this website take protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy statement.
Various pieces of personal data will be collected if you use this website. Personal data is any data by which you could be identified personally. This privacy statement explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmitted via the Internet (e.g. via email) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Withdrawal of your consent to processing of your data
Many data processing operations are possible only with your express consent. You may withdraw your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request can still be processed legally.
Right to lodge complaints with competent supervisory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent supervisory authorities. The competent supervisory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found under the following link:
Right to data portability
You have the right to have data which we process automatically based on your consent, or in fulfilment of a contract, delivered to you or to a third party in a commonly used, machine-readable format. If you require the direct transfer of data to another controller, this will only be done to the extent technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect transmission of confidential content, such as orders or enquiries you send to us as the site provider. You can recognise an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, erasure
As permitted by law, you have the right to be provided with information, at any time, free of charge, about any of your personal data that is stored, as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data rectified, blocked, or erased. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
3. Data collection on our website
Most of the cookies we use are what are known as “session cookies”. They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognise your browser when you next visit the site.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 (1) f. of the GDPR. The website provider has a legitimate interest in the storage of cookies to ensure an optimised service provided free of technical errors. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this privacy statement.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
These data will not be combined with data from other sources.
The basis for data processing is Art. 6 (1) f. GDPR, which allows the processing of data to fulfil a contract or for measures preliminary to a contract.
4. Analytics and advertising
This website uses Google Analytics, a web analytics service. It is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies”. These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) f. GDPR. The website provider has a legitimate interest in analysing user behaviour to optimise both its website and its advertising.
We have activated the IP anonymisation feature on this website. Your IP address will be shortened by Google within the European Union or other states party to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of this website’s provider to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website provider. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (including your IP address) from being passed to Google, and processing of these data by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be installed to prevent your data from being collected on future visits to this site: Forbid Google Analytics to track me.
We have concluded a data processing contract with Google and fully implement the German data protection authorities’ strict requirements for the use of Google Analytics.
5. Plugins and tools
Our website uses plugins provided by the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
A connection to Vimeo’s servers is established if you visit one of our pages featuring a Vimeo plugin. The Vimeo server is notified which of our pages you have visited. In addition, Vimeo will obtain your IP address. This also applies if you are not logged in to Vimeo when you visit our website, or do not have a Vimeo account. The information collected by Vimeo is transmitted to a Vimeo server in the USA, where it is stored.
If you are logged in to your Vimeo account, you are letting Vimeo associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Google web fonts
This page uses web fonts provided by Google for uniform representation of fonts. When you open a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
To do this, the browser you use must connect with Google’s servers. Google thus becomes aware that our web page was accessed via your IP address. Google web fonts are used in the interests of a uniform and attractive presentation of our website. This constitutes a legitimate interest pursuant to Art. 6 (1) f. GDPR.
Your computer uses a standard font if your browser does not support web fonts.
6. Custom Services
We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.
Scope and purpose of the collection of data
If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.
If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.
Data Archiving Period
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.