Data protection notice
Data protection notice
The operators of these pages take the protection of your personal data very seriously. In the following you will find information on how we handle your data. We process your personal data according to the legal data protection regulations
The use of our website is usually possible without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis to the greatest possible extent. This data will not be passed on to third parties without your express consent.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. The complete protection of data against access by third parties is not possible.
Our data protection notice should be simple and understandable. As a rule, the data protection notice declaration uses the official terms of the Basic Data Protection Regulation (GDPR). The official definitions are explained in Article 4 of the GDPR.
Responsible body in terms of data protection law
Neue Gröningerstr. 13
+49 40 36 09 35 100
Contact details of the data protection officer
Data processing by visiting our website
When you call up our webpages, it is technically necessary that data is transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:
- Visited domain
- Date and time of request
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Used web browser and used operating system
- IP address of the requesting computer
- Amount of transmitted data
We collect the listed data to ensure a smooth connection of the website and to enable the comfortable use of our website by users. In addition, the log file serves to evaluate system security and stability, as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Article 6 (1) (f) of the GDPR.
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.
We store this data for a period of 14 days.
Our Internet pages partly use technical cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognize your browser the next time you visit us. You can set your browser that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
These purposes also constitute our legitimate interest in data processing in accordance with Art 6 Paragraph 1 (f) of the GDPR.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass this data on without your consent. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1)(f) of the GDPR and, if applicable, Article 6 (1)(b) of the GDPR, if your request is aimed at the conclusion of a contract. Your data will be deleted after the final processing of your enquiry, provided that there are no legal storage obligations to the contrary.
If you apply for a job with us on our careers page, we process all the personal data you provide for the purpose of processing the application procedure (Art 6 Paragraph 1 (b)) GDPR). The application can also be sent electronically. If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests stand in the way of deletion. Other legitimate interests in this sense include, for example, a duty of proof in proceedings under the General Equal Treatment Act.
Provision of your data
We need parts of your data for the operation of our website as well as for the evaluation of IT security incidents, therefore your data is automatically collected by our internet provider.
If you provide us with your data via our contact form or on the career page, we need this data to answer your request. If you do not provide us with your contact data, we will not be able to contact you and answer your inquiry.
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you send to us cannot be read by third parties.
Social media links
Social networks (e.g. Facebook, Twitter and Xing) are only integrated on our website in the form of a link to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. Only after this redirection will user information be transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers you use.
Data transfer and recipient
Your personal data will not be transferred to third parties, except for
- if we have explicitly pointed this out in the description of the respective data processing.
- if you have given your express consent in accordance with Article 6 (1)(1)(a) of the GDPR,
- the disclosure pursuant to Article 6 (1)(1)(f) of the GDPR is necessary for the assertion, exercise, or defence of legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data in the event that there is a legal obligation to pass on the data in accordance with Article 6 (1)(1)(c) of the GDPR and
- insofar as this is necessary for the processing of contractual relationships with you in accordance with Article 6 (1)(1)(b) of the GDPR.
In addition, we use external service providers for the processing of our services, which we have carefully selected and commissioned in writing, and with whom we have, if necessary, concluded contract processing agreements in accordance with Article 28 of the GDPR. They are bound by our instructions and are regularly checked by us. These include service providers for webhosting, sending e-mails and maintenance and servicing of our IT systems, etc. The service providers will not pass on this data to third parties.
As a rule, your personal data will not be processed outside the European Union (EU) as we have limited our storage location to computer centres in the European Union.
Rights of data subjects
In the following, you will find information on the rights of data subjects that the applicable data protection law grants you vis-à-vis the data controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof.
The right to demand, in accordance with Article 16 of the GDPR, the immediate correction of incorrect or incomplete personal data stored by us.
The right, in accordance with Article 17 of the GDPR, to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
The right to demand, in accordance with Article 18 of the GDPR, the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise, or defence of legal claims, or if you have lodged an objection to the processing in accordance with Article 21 of the GDPR.
The right, in accordance with Article 20 of the GDPR, to receive your personal data that you have provided us with in a structured, common, and machine-readable format, or to request that it be transferred to another responsible party.
The right to complain to a supervisory authority pursuant to Article 77 of the GDPR. As a rule, you may contact the supervisory authority of the federal state of our registered office as stated above or, if applicable, that of your usual place of residence or workplace for this purpose.
The right to revoke consent granted pursuant to Article 7 (3) of the GDPR: you have the right to revoke any consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will immediately delete the concerned data, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Right of objection
If your personal data is processed by us on the basis of legitimate interests pursuant to Article 6 (1)(1)(f) of the GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR, provided that this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the need to specify a special situation.
If you wish to exercise your right of withdrawal or objection, it is sufficient to send an e-mail to firstname.lastname@example.org.
We do not use systems for automated decision making or profiling.
Advertising mails objection
The use of contact data published within the scope of the legal notice obligation for the transmission of not expressly requested advertising and information material is hereby contradicted. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
Changes to our data protection notice
We reserve the right to adapt or update this data protection notice if necessary in accordance with the applicable data protection regulations. In this way, we can adapt it to current legal requirements and account for changes in our services, e.g., when introducing new services. The most current version applies to your visit.
Last updated June 23, 2020