Privacy policy

1. An overview of data protec­tion

General infor­ma­tion

The following infor­ma­tion will provide you with an easy to navi­gate overview of what will happen with your personal data when you visit this website. The term ​“personal data” comprises all data that can be used to person­ally iden­tify you. For detailed infor­ma­tion about the subject matter of data protec­tion, please consult our Data Protec­tion Decla­ra­tion, which we have included beneath this copy.

Data recording on this website

Who is the respon­sible party for the recording of data on this website (i.e., the ​“controller”)?

The data on this website is processed by the oper­ator of the website, whose contact infor­ma­tion is avail­able under section ​“Infor­ma­tion about the respon­sible party (referred to as the ​“controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be infor­ma­tion you enter into our contact form.

Other data shall be recorded by our IT systems auto­mat­i­cally or after you consent to its recording during your website visit. This data comprises primarily tech­nical infor­ma­tion (e.g., web browser, oper­ating system, or time the site was accessed). This infor­ma­tion is recorded auto­mat­i­cally when you access this website.

What are the purposes we use your data for?

A portion of the infor­ma­tion is gener­ated to guar­antee the error free provi­sion of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your infor­ma­tion is concerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and purposes of your archived personal data at any time without having to pay a fee for such disclo­sures. You also have the right to demand that your data are recti­fied or erad­i­cated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. More­over, you have the right to demand that the processing of your data be restricted under certain circum­stances. Further­more, you have the right to log a complaint with the compe­tent super­vising agency.

Please do not hesi­tate to contact us at any time if you have ques­tions about this or any other data protec­tion related issues.

Analysis tools and tools provided by third parties

There is a possi­bility that your browsing patterns will be statis­ti­cally analyzed when your visit this website. Such analyses are performed primarily with what we refer to as analysis programs.

For detailed infor­ma­tion about these analysis programs please consult our Data Protec­tion Decla­ra­tion below.

2. Hosting

We are hosting the content of our website at the following provider:

Mittwald

The provider is the Mittwald CM Service GmbH & Co. KG, Königs­berger Straße 4-6, 32339 Espelkamp, Germany (here­inafter referred to as Mittwald).

For details, please view the data privacy policy of Mittwald: https://www.mittwald.de/datenschutz.

We use Mittwald on the basis of Art. 6(1)(f) GDPR. We have a legit­i­mate interest in the most reli­able depic­tion of our website possible. If appro­priate consent has been obtained, the processing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­printing) within the meaning of the TTDSG. This consent can be revoked at any time.

Data processing

We have concluded a data processing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

3. General infor­ma­tion and manda­tory infor­ma­tion

Data protec­tion

The oper­a­tors of this website and its pages take the protec­tion of your personal data very seri­ously. Hence, we handle your personal data as confi­den­tial infor­ma­tion and in compli­ance with the statu­tory data protec­tion regu­la­tions and this Data Protec­tion Decla­ra­tion.

When­ever you use this website, a variety of personal infor­ma­tion will be collected. Personal data comprises data that can be used to person­ally iden­tify you. This Data Protec­tion Decla­ra­tion explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the infor­ma­tion is collected.

We here­with advise you that the trans­mis­sion of data via the Internet (i.e., through e-mail commu­ni­ca­tions) may be prone to secu­rity gaps. It is not possible to completely protect data against third-party access.

Infor­ma­tion about the respon­sible party (referred to as the ​“controller” in the GDPR)

The data processing controller on this website is:

ar engi­neers GmbH
Kühne­höfe 20
22761 Hamburg

Phone: +49 40 228 680 980
E-mail: info@ar-engineers.de

The controller is the natural person or legal entity that single-hand­edly or jointly with others makes deci­sions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage dura­tion

Unless a more specific storage period has been spec­i­fied in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justi­fied request for dele­tion or revoke your consent to data processing, your data will be deleted, unless we have other legally permis­sible reasons for storing your personal data (e.g., tax or commer­cial law reten­tion periods); in the latter case, the dele­tion will take place after these reasons cease to apply.

General infor­ma­tion on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special cate­gories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third coun­tries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to infor­ma­tion in your end device (e.g., via device finger­printing), the data processing is addi­tion­ally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfill­ment of a contract or for the imple­men­ta­tion of pre-contrac­tual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Further­more, if your data is required for the fulfill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)© GDPR. Further­more, the data processing may be carried out on the basis of our legit­i­mate interest according to Art. 6(1)(f) GDPR. Infor­ma­tion on the rele­vant legal basis in each indi­vidual case is provided in the following para­graphs of this privacy policy.

Infor­ma­tion on data transfer to the USA and other non-EU coun­tries

Among other things, we use tools of compa­nies domi­ciled in the United States or other from a data protec­tion perspec­tive non-secure non-EU coun­tries. If these tools are active, your personal data may poten­tially be trans­ferred to these non-EU coun­tries and may be processed there. We must point out that in these coun­tries, a data protec­tion level that is compa­rable to that in the EU cannot be guar­an­teed. For instance, U.S. enter­prises are under a mandate to release personal data to the secu­rity agen­cies and you as the data subject do not have any liti­ga­tion options to defend your­self in court. Hence, it cannot be ruled out that U.S. agen­cies (e.g., the Secret Service) may process, analyze, and perma­nently archive your personal data for surveil­lance purposes. We have no control over these processing activ­i­ties.

Revo­ca­tion of your consent to the processing of data

A wide range of data processing trans­ac­tions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prej­u­dice to the lawful­ness of any data collec­tion that occurred prior to your revo­ca­tion.

Right to object to the collec­tion of data in special cases; right to object to direct adver­tising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the compe­tent super­vi­sory agency

In the event of viola­tions of the GDPR, data subjects are enti­tled to log a complaint with a super­vi­sory agency, in partic­ular in the member state where they usually main­tain their domi­cile, place of work or at the place where the alleged viola­tion occurred. The right to log a complaint is in effect regard­less of any other admin­is­tra­tive or court proceed­ings avail­able as legal recourses.

Right to data porta­bility

You have the right to demand that we hand over any data we auto­mat­i­cally process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine read­able format. If you should demand the direct transfer of the data to another controller, this will be done only if it is tech­ni­cally feasible.

Infor­ma­tion about, recti­fi­ca­tion and erad­i­ca­tion of data

Within the scope of the applic­able statu­tory provi­sions, you have the right to at any time demand infor­ma­tion about your archived personal data, their source and recip­i­ents as well as the purpose of the processing of your data. You may also have a right to have your data recti­fied or erad­i­cated. If you have ques­tions about this subject matter or any other ques­tions about personal data, please do not hesi­tate to contact us at any time.

Right to demand processing restric­tions

You have the right to demand the impo­si­tion of restric­tions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restric­tion of processing applies in the following cases:

• In the event that you should dispute the correct­ness of your data archived by us, we will usually need some time to verify this claim. During the time that this inves­ti­ga­tion is ongoing, you have the right to demand that we restrict the processing of your personal data.
• If the processing of your personal data was/​is conducted in an unlawful manner, you have the option to demand the restric­tion of the processing of your data in lieu of demanding the erad­i­ca­tion of this data.
• If we do not need your personal data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the processing of your personal data instead of its erad­i­ca­tion.
• If you have raised an objec­tion pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mined whose inter­ests prevail, you have the right to demand a restric­tion of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the excep­tion of their archiving – may be processed only subject to your consent or to claim, exer­cise or defend legal enti­tle­ments or to protect the rights of other natural persons or legal enti­ties or for impor­tant public interest reasons cited by the Euro­pean Union or a member state of the EU.

SSL and/​or TLS encryp­tion

For secu­rity reasons and to protect the trans­mis­sion of confi­den­tial content, such as purchase orders or inquiries you submit to us as the website oper­ator, this website uses either an SSL or a TLS encryp­tion program. You can recog­nize an encrypted connec­tion by checking whether the address line of the browser switches from ​“http://” to ​“https://” and also by the appear­ance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is acti­vated, data you transmit to us cannot be read by third parties.

Rejec­tion of unso­licited e-mails

We here­with object to the use of contact infor­ma­tion published in conjunc­tion with the manda­tory infor­ma­tion to be provided in our Site Notice to send us promo­tional and infor­ma­tion mate­rial that we have not expressly requested. The oper­a­tors of this website and its pages reserve the express right to take legal action in the event of the unso­licited sending of promo­tional infor­ma­tion, for instance via SPAM messages.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as ​“cookies.” Cookies are small data pack­ages that do not cause any damage to your device. They are either stored temporarily for the dura­tion of a session (session cookies) or they are perma­nently archived on your device (perma­nent cookies). Session cookies are auto­mat­i­cally deleted once you termi­nate your visit. Perma­nent cookies remain archived on your device until you actively delete them, or they are auto­mat­i­cally erad­i­cated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party compa­nies (so-called third-party cookies). Third-party cookies enable the inte­gra­tion of certain services of third-party compa­nies into websites (e.g., cookies for handling payment services).

Cookies have a variety of func­tions. Many cookies are tech­ni­cally essen­tial since certain website func­tions would not work in the absence of these cookies (e.g., the shop­ping cart func­tion or the display of videos). Other cookies may be used to analyze user behavior or for promo­tional purposes.

Cookies, which are required for the perfor­mance of elec­tronic commu­ni­ca­tion trans­ac­tions, for the provi­sion of certain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are neces­sary for the opti­miza­tion (required cookies) of the website (e.g., cookies that provide measur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The oper­ator of the website has a legit­i­mate interest in the storage of required cookies to ensure the tech­ni­cally error-free and opti­mized provi­sion of the operator’s services. If your consent to the storage of the cookies and similar recog­ni­tion tech­nolo­gies has been requested, the processing occurs exclu­sively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be noti­fied any time cookies are placed and to permit the accep­tance of cookies only in specific cases. You may also exclude the accep­tance of cookies in certain cases or in general or acti­vate the delete-func­tion for the auto­matic erad­i­ca­tion of cookies when the browser closes. If cookies are deac­ti­vated, the func­tions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Cook­iebot

Our website uses consent tech­nology from Cook­iebot to obtain your consent to the storage of certain cookies on your end device or for the use of certain tech­nolo­gies and to docu­ment this in a data protec­tion-compliant manner. The provider of this tech­nology is Cybot A/​S, Havne­gade 39, 1058 Copen­hagen, Denmark (here­inafter ​“Cook­iebot”).

When you enter our website, a connec­tion is estab­lished with the Cook­iebot servers to obtain your consent and provide you with other expla­na­tions regarding the use of cookies. Cook­iebot will then store a cookie in your browser to iden­tify the consent you have given or its revo­ca­tion. The data collected in this way is stored until you request us to delete it, delete the Cook­iebot cookie itself or the purpose for which the data is stored no longer applies. Manda­tory legal storage oblig­a­tions remain unaf­fected.

Cook­iebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)© GDPR.

Data processing

We have concluded a data processing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

Microsoft Book­ings

Our website gives you the option to schedule appoint­ments with us. We use Microsoft Book­ings to book these appoint­ments. The provider is Microsoft Ireland Oper­a­tions Limited, One Microsoft Place, South County Busi­ness Park, Leop­ard­stown, Dublin 18, Ireland, https://learn.microsoft.com/en-us/microsoft-365/bookings/?view=o365-worldwide.

To book an appoint­ment, enter the requested data and the desired date in the form provided. The data entered will be used for plan­ning, conducting and, if neces­sary, for the follow-up of the appoint­ment. The appoint­ment data will be stored for us on the servers of Microsoft Book­ings, whose privacy policy you can view here: https://privacy.microsoft.com/de-de/privacystatement.

The data recorded in this manner will be stored until you ask us to delete them, revoke your consent to the archiving of your data or until the purpose of archiving the data no longer exists. This does not affect manda­tory statu­tory provi­sions – in partic­ular those governing reten­tion periods.

The legal basis for the processing of the data is Art. 6(1)(f) GDPR. The oper­ator of the website has a legit­i­mate interest in ensuring that appoint­ments with customers and prospec­tive customers can be sched­uled as easily as possible. If appro­priate consent has been obtained, the processing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­printing) within the meaning of the TTDSG. This consent can be revoked at any time.

Data transfer to the US is based on the stan­dard contrac­tual clauses of the EU Commis­sion. Details can be found here: https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses.

5. Analysis tools and adver­tising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to inte­grate tracking or statis­tical tools and other tech­nolo­gies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any inde­pen­dent analyses. It only manages and runs the tools inte­grated via it. However, the Google Tag Manager does collect your IP address, which may also be trans­ferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website oper­ator has a legit­i­mate interest in the quick and uncom­pli­cated inte­gra­tion and admin­is­tra­tion of various tools on his website. If appro­priate consent has been obtained, the processing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­printing) within the meaning of the TTDSG. This consent can be revoked at any time.

Google Analytics

This website uses func­tions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website oper­ator to analyze the behavior patterns of website visi­tors. To that end, the website oper­ator receives a variety of user data, such as pages accessed, time spent on the page, the utilized oper­ating system and the user’s origin. This data is assigned to the respec­tive end device of the user. An assign­ment to a user-ID does not take place.

Further­more, Google Analytics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning tech­nolo­gies in data analysis.

Google Analytics uses tech­nolo­gies that make the recog­ni­tion of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device finger­printing). The website use infor­ma­tion recorded by Google is, as a rule trans­ferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plug-in

You can prevent the recording and processing of your data by Google by down­loading and installing the browser plugin avail­able under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the handling of user data by Google Analytics, please consult Google’s Data Privacy Decla­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Google Signals

We use Google Signals. When­ever you visit our website, Google Analytics records, among other things, your loca­tion, the progres­sion of your search and YouTube progres­sion as well as demo­graphic data (site visitor data). This data may be used for customized adver­tising with the assis­tance of Google Signal. If you have a Google account, your site visitor infor­ma­tion will be linked to your Google account by Google Signal and used to send you customized promo­tional messages. The data is also used to compile anonymized statis­tics of our users’ online patterns.

Contract data processing

We have executed a contract data processing agree­ment with Google and are imple­menting the strin­gent provi­sions of the German data protec­tion agen­cies to the fullest when using Google Analytics.

Clarity

This website uses Clarity. The provider is the Microsoft Ireland Oper­a­tions Limited, One Microsoft Place, South County Busi­ness Park, Leop­ard­stown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (here­inafter referred to as ​“Clarity”).

Clarity is a tool to analyze user patterns on this website. Clarity records in partic­ular cursor move­ments and compiles graphics that show on which parts of the website users are scrolling with great frequency (heatmaps). Clarity can also record sessions so that we can watch the use of the site in the form of videos. More­over, we receive infor­ma­tion on the general user conduct within our website.

Clarity uses tech­nolo­gies that make it possible to recog­nize users for the purpose of analyzing user patterns (e.g., cookies or use of device finger­printing). Your personal data will be archived on Microsoft servers (Microsoft Azure Cloud Service) in the United States.

If your approval (consent) has been obtained the use of the above­men­tioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecom­mu­ni­ca­tions Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of Art. 6(1)(f) GDPR; the website oper­ator has a legit­i­mate interest in the effec­tive analysis of user patterns.

For more details on Clarity’s data privacy policy, please see: https://docs.microsoft.com/en-us/clarity/faq.

Data processing

We have concluded a data processing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

LinkedIn Insight Tag

This website uses the Insight tag from LinkedIn. This service is provided by LinkedIn Ireland Unlim­ited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight tag

We use the LinkedIn Insight tag to obtain infor­ma­tion about visi­tors to our website. Once a website visitor is regis­tered with LinkedIn, we can analyze the key occu­pa­tional data (e.g., career level, company size, country, loca­tion, industry, job title) of our website visi­tors to help us better target our site to the rele­vant audi­ence. We can also use LinkedIn Insight tags to measure whether visi­tors to our websites make a purchase or perform other actions (conver­sion measure­ment). Conver­sion measure­ment can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also features a retar­geting func­tion that allows us to display targeted adver­tising to visi­tors to our website outside of the website. According to LinkedIn, no iden­ti­fi­ca­tion of the adver­tising addressee takes place.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser char­ac­ter­is­tics and time of access). The IP addresses are short­ened or (if they are used to reach LinkedIn members across devices) hashed (pseu­do­nymized). The direct iden­ti­fiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseu­do­nymized data will then be deleted within 180 days.

The data collected by LinkedIn cannot be assigned by us as a website oper­ator to specific indi­vid­uals. LinkedIn will store the personal data collected from website visi­tors on its servers in the USA and use it for its own promo­tional activ­i­ties. For details, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

If your approval (consent) has been obtained the use of the above­men­tioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecom­mu­ni­ca­tions Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of Art. 6(1)(f) GDPR; the website oper­ator has a legit­i­mate interest in effec­tive adver­tising promo­tions that include the utiliza­tion of social media.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objec­tion to the use of LinkedIn Insight Tag

You can object to LinkedIn’s analysis of user behavior and targeted adver­tising at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

In addi­tion, LinkedIn members can control the use of their personal infor­ma­tion for promo­tional purposes in the account settings. To prevent LinkedIn from linking infor­ma­tion collected on our site to your LinkedIn account, you must log out of your LinkedIn account before you visit our site.

Data processing

We have concluded a data processing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

6. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as infor­ma­tion that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a volun­tary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.

Send­in­blue

This website uses Send­in­blue for the sending of newslet­ters. The provider is the Send­in­blue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Send­in­blue services can, among other things, be used to orga­nize and analyze the sending of newslet­ters. The data you enter for the purpose of subscribing to the newsletter are archived on Sendinblue’s servers in Germany.

Data analysis by Send­in­blue

Send­in­blue enables us to analyze our newsletter campaigns. For instance, it allows us to see whether a newsletter message has been opened and, if so, which links may have been clicked. This enables us to deter­mine, which links drew an extra­or­di­nary number of clicks.

More­over, we are also able to see whether once the e-mail was opened or a link was clicked, any previ­ously defined actions were taken (conver­sion rate). This allows us to deter­mine whether you have made a purchase after clicking on the newsletter.

Send­in­blue also enables us to divide the subscribers to our newsletter into various cate­gories (i.e., to ​“cluster” recip­i­ents). For instance, newsletter recip­i­ents can be cate­go­rized based on age, gender, or place of resi­dence. This enables us to tailor our newsletter more effec­tively to the needs of the respec­tive target groups.

If you do not want to permit an analysis by Send­in­blue, you must unsub­scribe from the newsletter. We provide a link for you to do this in every newsletter message. More­over, you can also unsub­scribe from the newsletter right on the website.

For detailed infor­ma­tion on the func­tions of Send­in­blue please follow this link: https://www.sendinblue.com/newsletter-software/.

Legal basis

The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsub­scribing from the newsletter. This shall be without prej­u­dice to the lawful­ness of any data processing trans­ac­tions that have taken place prior to your revo­ca­tion.

Storage period

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsub­scribe from the newsletter or the newsletter service provider and deleted from the newsletter distri­b­u­tion list after you unsub­scribe from the newsletter. Data stored for other purposes with us remain unaf­fected.

After you unsub­scribe from the newsletter distri­b­u­tion list, your e-mail address may be stored by us or the newsletter service provider in a black­list, if such action is neces­sary to prevent future mail­ings. The data from the black­list is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal require­ments when sending newslet­ters (legit­i­mate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the black­list is indef­i­nite. You may object to the storage if your inter­ests outweigh our legit­i­mate interest.

For more details, please consult the Data Protec­tion Regu­la­tions of Send­in­blue at: https://de.sendinblue.com/datenschutz-uebersicht/.

Data processing

We have concluded a data processing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

7. Online-based Audio and Video Confer­ences (Confer­ence tools)

Data processing

We use online confer­ence tools, among other things, for commu­ni­ca­tion with our customers. The tools we use are listed in detail below. If you commu­ni­cate with us by video or audio confer­ence using the Internet, your personal data will be collected and processed by the provider of the respec­tive confer­ence tool and by us. The confer­encing tools collect all infor­ma­tion that you provide/​access to use the tools (email address and/​or your phone number). Further­more, the confer­ence tools process the dura­tion of the confer­ence, start and end (time) of partic­i­pa­tion in the confer­ence, number of partic­i­pants and other ​“context infor­ma­tion” related to the commu­ni­ca­tion process (meta­data).

Further­more, the provider of the tool processes all the tech­nical data required for the processing of the online commu­ni­ca­tion. This includes, in partic­ular, IP addresses, MAC addresses, device IDs, device type, oper­ating system type and version, client version, camera type, micro­phone or loud­speaker and the type of connec­tion.

Should content be exchanged, uploaded, or other­wise made avail­able within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud record­ings, chat/​instant messages, voice­mail uploaded photos and videos, files, white­boards, and other infor­ma­tion shared while using the service.

Please note that we do not have complete influ­ence on the data processing proce­dures of the tools used. Our possi­bil­i­ties are largely deter­mined by the corpo­rate policy of the respec­tive provider. Further infor­ma­tion on data processing by the confer­ence tools can be found in the data protec­tion decla­ra­tions of the tools used, and which we have listed below this text.

Purpose and legal bases

The confer­ence tools are used to commu­ni­cate with prospec­tive or existing contrac­tual part­ners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Further­more, the use of the tools serves to gener­ally simplify and accel­erate commu­ni­ca­tion with us or our company (legit­i­mate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in ques­tion will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Dura­tion of storage

Data collected directly by us via the video and confer­ence tools will be deleted from our systems imme­di­ately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Manda­tory legal reten­tion periods remain unaf­fected.

We have no influ­ence on the dura­tion of storage of your data that is stored by the oper­a­tors of the confer­ence tools for their own purposes. For details, please directly contact the oper­a­tors of the confer­ence tools.

Confer­ence tools used

We employ the following confer­ence tools:

Microsoft Teams

We use Microsoft Teams. The provider is the Microsoft Ireland Oper­a­tions Limited, One Microsoft Place, South County Busi­ness Park, Leop­ard­stown, Dublin 18, Ireland. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.

Data processing

We have concluded a data processing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

8. Custom Services

Handling appli­cant data

We offer website visi­tors the oppor­tu­nity to submit job appli­ca­tions to us (e.g., via e-mail, via postal services on by submit­ting the online job appli­ca­tion form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunc­tion with the appli­ca­tion process. We assure you that the collec­tion, processing, and use of your data will occur in compli­ance with the applic­able data privacy rights and all other statu­tory provi­sions and that your data will always be treated as strictly confi­den­tial.

Scope and purpose of the collec­tion of data

If you submit a job appli­ca­tion to us, we will process any affil­i­ated personal data (e.g., contact and commu­ni­ca­tions data, appli­ca­tion docu­ments, notes taken during job inter­views, etc.), if they are required to make a deci­sion concerning the estab­lish­ment or an employ­ment rela­tion­ship. The legal grounds for the afore­men­tioned are § 26 BDSG according to German Law (Nego­ti­a­tion of an Employ­ment Rela­tion­ship), Art. 6(1)(b) GDPR (General Contract Nego­ti­a­tions) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with indi­vid­uals who are involved in the processing of your job appli­ca­tion.

If your job appli­ca­tion should result in your recruit­ment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of imple­menting the employ­ment rela­tion­ship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have submitted on the basis of our legit­i­mate inter­ests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­tion proce­dure (rejec­tion or with­drawal of the appli­ca­tion). After­wards the data will be deleted, and the phys­ical appli­ca­tion docu­ments will be destroyed. The storage serves in partic­ular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), dele­tion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agree­ment (Article 6(1)(a) GDPR) or if statu­tory data reten­tion require­ments preclude the dele­tion.

Admis­sion to the appli­cant pool

If we do not make you a job offer, you may be able to join our appli­cant pool. In case of admis­sion, all docu­ments and infor­ma­tion from the appli­ca­tion will be trans­ferred to the appli­cant pool in order to contact you in case of suit­able vacan­cies.

Admis­sion to the appli­cant pool is based exclu­sively on your express agree­ment (Art. 6(1)(a) GDPR). The submis­sion agree­ment is volun­tary and has no rela­tion to the ongoing appli­ca­tion proce­dure. The affected person can revoke his agree­ment at any time. In this case, the data from the appli­cant pool will be irrev­o­cably deleted, provided there are no legal reasons for storage.

The data from the appli­cant pool will be irrev­o­cably deleted no later than two years after consent has been granted.