Request advice

Data protection

Privacy policy

1. data protection at a glance

General information

The fol­lo­wing infor­ma­ti­on pro­vi­des a simp­le over­view of what hap­pens to your per­so­nal data when you visit this web­site. Per­so­nal data is any data that can be used to iden­ti­fy you per­so­nal­ly. Detail­ed infor­ma­ti­on on the sub­ject of data pro­tec­tion can be found in our data pro­tec­tion decla­ra­ti­on lis­ted below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data pro­ces­sing on this web­site is car­ri­ed out by the web­site ope­ra­tor. You can find the operator’s cont­act details in the “Infor­ma­ti­on on the con­trol­ler” sec­tion of this pri­va­cy poli­cy.

How do we collect your data?

On the one hand, your data is coll­ec­ted when you pro­vi­de it to us. This may, for exam­p­le, be data that you enter in a cont­act form.

Other data is coll­ec­ted auto­ma­ti­cal­ly or with your con­sent by our IT sys­tems when you visit the web­site. This is pri­ma­ri­ly tech­ni­cal data (e.g. inter­net brow­ser, ope­ra­ting sys­tem or time of page view). This data is coll­ec­ted auto­ma­ti­cal­ly as soon as you enter this web­site.

What do we use your data for?

Some of the data is coll­ec­ted to ensu­re that the web­site is pro­vi­ded wit­hout errors. Other data may be used to ana­ly­ze your user beha­vi­or. If con­tracts can be con­cluded or initia­ted via the web­site, the trans­mit­ted data will also be pro­ces­sed for con­tract offers, orders or other order inqui­ries.

What rights do you have with regard to your data?

You have the right to recei­ve infor­ma­ti­on about the ori­gin, reci­pi­ent and pur­po­se of your stored per­so­nal data free of char­ge at any time. You also have the right to request the cor­rec­tion or dele­ti­on of this data. If you have given your con­sent to data pro­ces­sing, you can revo­ke this con­sent at any time for the future. You also have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data under cer­tain cir­cum­s­tances. Fur­ther­mo­re, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry aut­ho­ri­ty.

You can cont­act us at any time if you have fur­ther ques­ti­ons on the sub­ject of data pro­tec­tion.

Analysis tools and tools from third-party providers

When you visit this web­site, your sur­fing beha­vi­or may be sta­tis­ti­cal­ly eva­lua­ted. This is main­ly done with so-cal­led ana­ly­sis pro­grams.

Detail­ed infor­ma­ti­on on the­se ana­ly­sis pro­grams can be found in the fol­lo­wing pri­va­cy poli­cy.

2. hosting and content delivery networks (CDN)

Bunny.net CDN

We use the con­tent deli­very net­work Bunny.net. The pro­vi­der is Bun­ny­Way d.o.o., Duna­js­ka ces­ta 165, 1000 Ljublja­na, Slove­nia (her­ein­af­ter “Bunny.net CDN”).

Bunny.net CDN is a glo­bal­ly dis­tri­bu­ted con­tent deli­very net­work. Tech­ni­cal­ly, the infor­ma­ti­on trans­fer bet­ween your brow­ser and our web­site is rou­ted via the con­tent deli­very net­work. This enables us to increase the glo­bal acces­si­bi­li­ty and per­for­mance of our web­site. The CDN records the IP address, but this is anony­mi­zed. The CDN also coll­ects per­so­nal data if it is ente­red by the user (e.g. by sub­mit­ting a cont­act form on the web­site).

The use of Bunny.net CDN is based on our legi­ti­ma­te inte­rest in pro­vi­ding our web­site as error-free and secu­re as pos­si­ble (Art. 6 para. 1 lit. f GDPR).

You can find more infor­ma­ti­on about Bunny.net CDN here: https://bunny.net/privacy/.

3 General notes and mandatory information

Data protection

The ope­ra­tors of the­se pages take the pro­tec­tion of your per­so­nal data very serious­ly. We tre­at your per­so­nal data con­fi­den­ti­al­ly and in accordance with the sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this pri­va­cy poli­cy.

When you use this web­site, various per­so­nal data is coll­ec­ted. Per­so­nal data is data that can be used to iden­ti­fy you per­so­nal­ly. This pri­va­cy poli­cy explains what data we coll­ect and what we use it for. It also explains how and for what pur­po­se this is done.

We would like to point out that data trans­mis­si­on over the Inter­net (e.g. when com­mu­ni­ca­ting by email) may be sub­ject to secu­ri­ty vul­nerabi­li­ties. Com­ple­te pro­tec­tion of data against access by third par­ties is not pos­si­ble.

Note on the responsible body

The con­trol­ler respon­si­ble for data pro­ces­sing on this web­site is:

KOMOS GmbH
Bahn­hofstras­se 2
07616 Bür­gel

Pho­ne: +49 (0)36692 490 0
E‑mail: sekretariat@komos.de

The con­trol­ler is the natu­ral or legal per­son who alo­ne or joint­ly with others deter­mi­nes the pur­po­ses and means of the pro­ces­sing of per­so­nal data (e.g. names, email addres­ses, etc.).

Storage duration

Unless a more spe­ci­fic sto­rage peri­od has been spe­ci­fied in this pri­va­cy poli­cy, your per­so­nal data will remain with us until the pur­po­se for data pro­ces­sing no lon­ger appli­es. If you assert a jus­ti­fied request for dele­ti­on or revo­ke your con­sent to data pro­ces­sing, your data will be dele­ted unless we have other legal­ly per­mis­si­ble reasons for sto­ring your per­so­nal data (e.g. reten­ti­on peri­ods under tax or com­mer­cial law); in the lat­ter case, the dele­ti­on will take place after the­se reasons no lon­ger app­ly.

General information on the legal basis for data processing on this website

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, inso­far as spe­cial cate­go­ries of data are pro­ces­sed in accordance with Art. 9 para. 1 GDPR. In the event of express con­sent to the trans­fer of per­so­nal data to third count­ries, data pro­ces­sing is also car­ri­ed out on the basis of Art. 49 para. 1 lit. a GDPR. If you have con­sen­ted to the sto­rage of coo­kies or access to infor­ma­ti­on in your end device (e.g. via device fin­ger­prin­ting), the data pro­ces­sing is also car­ri­ed out on the basis of Sec­tion 25 (1) TDDDG. Con­sent can be revo­ked at any time. If your data is requi­red to ful­fill the con­tract or to car­ry out pre-con­trac­tu­al mea­su­res, we pro­cess your data on the basis of Art. 6 para. 1 lit. b GDPR. Fur­ther­mo­re, we pro­cess your data if this is neces­sa­ry to ful­fill a legal obli­ga­ti­on on the basis of Art. 6 para. 1 lit. c GDPR. Data pro­ces­sing may also be car­ri­ed out on the basis of our legi­ti­ma­te inte­rest in accordance with Art. 6 para. 1 lit. f GDPR. Infor­ma­ti­on on the rele­vant legal bases in each indi­vi­du­al case is pro­vi­ded in the fol­lo­wing para­graphs of this pri­va­cy poli­cy.

Data Protection Officer

We have appoin­ted a data pro­tec­tion offi­cer.

Dr. Kum­mer, Jochen age­nos GmbH

Tele­pho­ne: [Tele­pho­ne num­ber of the data pro­tec­tion offi­cer]
E‑mail: datenschutz@komos.de

Recipients of personal data

As part of our busi­ness acti­vi­ties, we work tog­e­ther with various exter­nal bodies. In some cases, it is also neces­sa­ry to trans­fer per­so­nal data to the­se exter­nal bodies. We only pass on per­so­nal data to exter­nal bodies if this is neces­sa­ry for the ful­fill­ment of a con­tract, if we are legal­ly obli­ged to do so (e.g. pas­sing on data to tax aut­ho­ri­ties), if we have a legi­ti­ma­te inte­rest in the trans­fer in accordance with Art. 6 para. 1 lit. f GDPR or if ano­ther legal basis per­mits the trans­fer of data. When using pro­ces­sors, we only pass on our cus­to­mers’ per­so­nal data on the basis of a valid con­tract for order pro­ces­sing. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is con­cluded.

Revocation of your consent to data processing

Many data pro­ces­sing ope­ra­ti­ons are only pos­si­ble with your express con­sent. You can with­draw your con­sent at any time. The lega­li­ty of the data pro­ces­sing car­ri­ed out until the revo­ca­ti­on remains unaf­fec­ted by the revo­ca­ti­on.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of brea­ches of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of their habi­tu­al resi­dence, place of work or place of the alle­ged inf­rin­ge­ment. The right to lodge a com­plaint is wit­hout pre­ju­di­ce to other admi­nis­tra­ti­ve or judi­cial reme­dies.

Right to data portability

You have the right to have data that we pro­cess auto­ma­ti­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract han­ded over to you or to a third par­ty in a com­mon, machi­ne-rea­da­ble for­mat. If you request the direct trans­fer of the data to ano­ther con­trol­ler, this will only take place if it is tech­ni­cal­ly fea­si­ble.

Information, correction and deletion

Within the frame­work of the appli­ca­ble legal pro­vi­si­ons, you have the right to free infor­ma­ti­on about your stored per­so­nal data, its ori­gin and reci­pi­ents and the pur­po­se of the data pro­ces­sing and, if neces­sa­ry, a right to cor­rec­tion or dele­ti­on of this data at any time. You can cont­act us at any time if you have fur­ther ques­ti­ons on the sub­ject of per­so­nal data.

Right to restriction of processing

You have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data. You can cont­act us at any time to do this. The right to rest­ric­tion of pro­ces­sing exists in the fol­lo­wing cases:

  • If you dis­pu­te the accu­ra­cy of your per­so­nal data stored by us, we gene­ral­ly need time to check this. You have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data for the dura­ti­on of the review.
  • If the pro­ces­sing of your per­so­nal data was/is car­ri­ed out unlawful­ly, you can request the rest­ric­tion of data pro­ces­sing ins­tead of era­su­re.
  • If we no lon­ger need your per­so­nal data, but you need it for the exer­cise, defen­se or asser­ti­on of legal claims, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of dele­ti­on.
  • If you have lodged an objec­tion pur­su­ant to Art. 21 (1) GDPR, a balan­ce must be struck bet­ween your inte­rests and ours. As long as it has not yet been deter­mi­ned who­se inte­rests pre­vail, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, this data — apart from its sto­rage — may only be pro­ces­sed with your con­sent or for the estab­lish­ment, exer­cise or defen­se of legal claims or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son or for reasons of important public inte­rest of the Euro­pean Uni­on or of a Mem­ber Sta­te.

SSL or TLS encryption

This site uses SSL or TLS encryp­ti­on for secu­ri­ty reasons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as orders or inqui­ries that you send to us as the site ope­ra­tor. You can reco­gni­ze an encrypt­ed con­nec­tion by the fact that the address line of the brow­ser chan­ges from “http://” to “https://” and by the lock sym­bol in your brow­ser line.

If SSL or TLS encryp­ti­on is acti­va­ted, the data you trans­mit to us can­not be read by third par­ties.

Objection to advertising e‑mails

We her­eby object to the use of cont­act data published as part of our obli­ga­ti­on to pro­vi­de a legal noti­ce for the pur­po­se of sen­ding unso­li­ci­ted adver­ti­sing and infor­ma­ti­on mate­ri­al. The ope­ra­tors of this web­site express­ly reser­ve the right to take legal action in the event of the unso­li­ci­ted sen­ding of adver­ti­sing infor­ma­ti­on, such as spam e‑mails.

4. data collection on this website

Cookies

Our Inter­net pages use so-cal­led “coo­kies”. Coo­kies are small data packets and do not cau­se any dama­ge to your end device. They are stored on your device eit­her tem­po­r­a­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or per­ma­nent­ly (per­ma­nent coo­kies). Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted at the end of your visit. Per­ma­nent coo­kies remain stored on your end device until you dele­te them yours­elf or they are auto­ma­ti­cal­ly dele­ted by your web brow­ser.

Coo­kies may ori­gi­na­te from us (first-par­ty coo­kies) or from third-par­ty com­pa­nies (so-cal­led third-par­ty coo­kies). Third-par­ty coo­kies enable the inte­gra­ti­on of cer­tain ser­vices from third-par­ty com­pa­nies within web­sites (e.g. coo­kies for pro­ces­sing pay­ment ser­vices).

Coo­kies have various func­tions. Many coo­kies are tech­ni­cal­ly neces­sa­ry, as cer­tain web­site func­tions would not work wit­hout them (e.g. the shop­ping cart func­tion or the dis­play of vide­os). Other coo­kies can be used to eva­lua­te user beha­vi­or or for adver­ti­sing pur­po­ses.

Coo­kies that are requi­red to car­ry out the elec­tro­nic com­mu­ni­ca­ti­on pro­cess, to pro­vi­de cer­tain func­tions that you have reques­ted (e.g. for the shop­ping cart func­tion) or to opti­mi­ze the web­site (e.g. coo­kies to mea­su­re the web audi­ence) (neces­sa­ry coo­kies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless ano­ther legal basis is spe­ci­fied. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the sto­rage of neces­sa­ry coo­kies for the tech­ni­cal­ly error-free and opti­mi­zed pro­vi­si­on of its ser­vices. If con­sent to the sto­rage of coo­kies and com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the con­sent can be revo­ked at any time.

You can set your brow­ser so that you are infor­med about the set­ting of coo­kies and only allow coo­kies in indi­vi­du­al cases, exclude the accep­tance of coo­kies for cer­tain cases or in gene­ral and acti­va­te the auto­ma­tic dele­ti­on of coo­kies when clo­sing the brow­ser. If coo­kies are deac­ti­va­ted, the func­tion­a­li­ty of this web­site may be rest­ric­ted.

You can find out which coo­kies and ser­vices are used on this web­site in this pri­va­cy poli­cy.

CCM19

Our web­site uses CCM19 to obtain your con­sent to the sto­rage of cer­tain coo­kies on your end device or to the use of cer­tain tech­no­lo­gies and to docu­ment the­se in com­pli­ance with data pro­tec­tion regu­la­ti­ons. The pro­vi­der of this tech­no­lo­gy is Papoo Soft­ware & Media GmbH, August­str. 4, 53229 Bonn (her­ein­af­ter refer­red to as “CCM19”).

When you enter our web­site, a con­nec­tion is estab­lished to the CCM19 ser­vers in order to obtain your con­sent and other decla­ra­ti­ons regar­ding the use of coo­kies. CCM19 then stores a coo­kie in your brow­ser in order to be able to assign the cons­ents you have given or revo­ke them. The data coll­ec­ted in this way is stored until you ask us to dele­te it, dele­te the CCM19 coo­kie yours­elf or the pur­po­se for sto­ring the data no lon­ger appli­es. Man­da­to­ry sta­tu­to­ry reten­ti­on obli­ga­ti­ons remain unaf­fec­ted.

CCM19 is used to obtain the legal­ly requi­red con­sent for the use of coo­kies. The legal basis for this is Art. 6 para. 1 sen­tence 1 lit. c GDPR.

Order processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract pre­scri­bed by data pro­tec­tion law, which ensu­res that it pro­ces­ses the per­so­nal data of our web­site visi­tors only in accordance with our ins­truc­tions and in com­pli­ance with the GDPR.

Contact form

If you send us inqui­ries via the cont­act form, your details from the inquiry form, inclu­ding the cont­act details you pro­vi­de the­re, will be stored by us for the pur­po­se of pro­ces­sing the inquiry and in the event of fol­low-up ques­ti­ons. We will not pass on this data wit­hout your con­sent.

This data is pro­ces­sed on the basis of Art. 6 para. 1 lit. b GDPR if your request is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the inqui­ries addres­sed to us (Art. 6 para. 1 lit. f GDPR) or on your con­sent (Art. 6 para. 1 lit. a GDPR) if this has been reques­ted; con­sent can be revo­ked at any time.

We will retain the data you pro­vi­de on the cont­act form until you request its dele­ti­on, revo­ke your con­sent for its sto­rage, or the pur­po­se for its sto­rage no lon­ger per­ta­ins (e.g. after ful­fil­ling your request). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar reten­ti­on peri­ods — remain unaf­fec­ted.

Request by e‑mail, telephone or fax

If you cont­act us by e‑mail, tele­pho­ne or fax, we will store and pro­cess your inquiry, inclu­ding all per­so­nal data (name, inquiry), for the pur­po­se of pro­ces­sing your request. We will not pass on this data wit­hout your con­sent.

This data is pro­ces­sed on the basis of Art. 6 para. 1 lit. b GDPR if your request is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the inqui­ries addres­sed to us (Art. 6 para. 1 lit. f GDPR) or on your con­sent (Art. 6 para. 1 lit. a GDPR) if this has been reques­ted; con­sent can be revo­ked at any time.

The data you send to us via cont­act requests will remain with us until you ask us to dele­te it, revo­ke your con­sent to sto­rage or the pur­po­se for data sto­rage no lon­ger appli­es (e.g. after your request has been pro­ces­sed). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods — remain unaf­fec­ted.

5. analysis tools and advertising

Google Tag Manager

We use the Goog­le Tag Mana­ger. The pro­vi­der is Goog­le Ire­land Limi­t­ed, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

Goog­le Tag Mana­ger is a tool that enables us to inte­gra­te track­ing or sta­tis­ti­cal tools and other tech­no­lo­gies on our web­site. The Goog­le Tag Mana­ger its­elf does not crea­te any user pro­files, does not store any coo­kies and does not car­ry out any inde­pen­dent ana­ly­ses. It is only used to mana­ge and dis­play the tools inte­gra­ted via it. Howe­ver, Goog­le Tag Mana­ger records your IP address, which may also be trans­mit­ted to Google’s parent com­pa­ny in the United Sta­tes.

The Goog­le Tag Mana­ger is used on the basis of Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the fast and uncom­pli­ca­ted inte­gra­ti­on and manage­ment of various tools on its web­site. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be revo­ked at any time.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on on this can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/5780.

Hotjar

This web­site uses Hot­jar. The pro­vi­der is Hot­jar Ltd, Level 2, St Juli­ans Busi­ness Cent­re, 3, Elia Zam­mit Street, St Juli­ans STJ 1000, Mal­ta, Euro­pe (Web­site: https://www.hotjar.com).

Hot­jar is a tool for ana­ly­zing your user beha­vi­or on this web­site. Hot­jar allows us to record your mou­se and scroll move­ments and clicks, among other things. Hot­jar can also deter­mi­ne how long you remain with the mou­se poin­ter in a cer­tain posi­ti­on. Hot­jar uses this infor­ma­ti­on to crea­te so-cal­led heat maps, which can be used to deter­mi­ne which are­as of the web­site visi­tors pre­fer to look at.

Fur­ther­mo­re, we can deter­mi­ne how long you stay­ed on a page and when you left it. We can also deter­mi­ne at which point you abor­ted your ent­ries in a cont­act form (so-cal­led con­ver­si­on fun­nels).

Hot­jar can also be used to obtain direct feed­back from web­site visi­tors. This func­tion ser­ves to impro­ve the web­site operator’s web offe­rings.

Hot­jar uses tech­no­lo­gies that enable the reco­gni­ti­on of the user for the pur­po­se of ana­ly­zing user beha­vi­or (e.g. coo­kies or the use of device fin­ger­prin­ting).

If con­sent has been obtai­ned, the abo­ve-men­tio­ned ser­vice is used exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Con­sent can be revo­ked at any time. If con­sent has not been obtai­ned, this ser­vice is used on the basis of Art. 6 para. 1 lit. f GDPR; the web­site ope­ra­tor has a legi­ti­ma­te inte­rest in ana­ly­zing user beha­vi­or in order to opti­mi­ze both its web­site and its adver­ti­sing.

Deactivating Hotjar

If you wish to deac­ti­va­te data coll­ec­tion by Hot­jar, click on the fol­lo­wing link and fol­low the ins­truc­tions the­re: https://www.hotjar.com/policies/do-not-track/

Plea­se note that Hot­jar must be deac­ti­va­ted sepa­ra­te­ly for each brow­ser or end device.

For more infor­ma­ti­on about Hot­jar and the data coll­ec­ted, plea­se refer to Hotjar’s pri­va­cy poli­cy at the fol­lo­wing link: https://www.hotjar.com/privacy

Order processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract pre­scri­bed by data pro­tec­tion law, which ensu­res that it pro­ces­ses the per­so­nal data of our web­site visi­tors only in accordance with our ins­truc­tions and in com­pli­ance with the GDPR.

Google Ads

The web­site ope­ra­tor uses Goog­le Ads. Goog­le Ads is an online adver­ti­sing pro­gram of Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

Goog­le Ads enables us to dis­play adver­ti­se­ments in the Goog­le search engi­ne or on third-par­ty web­sites when the user enters cer­tain search terms on Goog­le (key­word tar­ge­ting). Fur­ther­mo­re, tar­ge­ted adver­ti­se­ments can be dis­play­ed based on the user data available at Goog­le (e.g. loca­ti­on data and inte­rests) (tar­get group tar­ge­ting). As the web­site ope­ra­tor, we can eva­lua­te this data quan­ti­ta­tively by ana­ly­zing, for exam­p­le, which search terms led to the dis­play of our adver­ti­se­ments and how many adver­ti­se­ments led to cor­re­spon­ding clicks.

The use of this ser­vice is based on your con­sent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Con­sent can be revo­ked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. You can find details here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on on this can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/5780.

Google Ads Remarketing

This web­site uses the func­tions of Goog­le Ads Remar­ke­ting. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

With Goog­le Ads Remar­ke­ting, we can assign peo­p­le who inter­act with our online offer to spe­ci­fic tar­get groups in order to sub­se­quent­ly show them inte­rest-based adver­ti­sing in the Goog­le adver­ti­sing net­work (remar­ke­ting or retar­ge­ting).

Fur­ther­mo­re, the adver­ti­sing tar­get groups crea­ted with Goog­le Ads Remar­ke­ting can be lin­ked to Google’s cross-device func­tions. In this way, inte­rest-based, per­so­na­li­zed adver­ti­sing mes­sa­ges that have been adapt­ed to you depen­ding on your pre­vious usa­ge and sur­fing beha­vi­or on one device (e.g. cell pho­ne) can also be dis­play­ed on ano­ther of your devices (e.g. tablet or PC).

If you have a Goog­le account, you can object to per­so­na­li­zed adver­ti­sing by cli­cking on the fol­lo­wing link: https://adssettings.google.com/anonymous?hl=de.

The use of this ser­vice is based on your con­sent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Con­sent can be revo­ked at any time.

Fur­ther infor­ma­ti­on and the data pro­tec­tion pro­vi­si­ons can be found in Google’s pri­va­cy poli­cy at: https://policies.google.com/technologies/ads?hl=de.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on on this can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/5780.

Meta Pixel (formerly Facebook Pixel)

This web­site uses the visi­tor action pixel from Meta to mea­su­re con­ver­si­ons. The pro­vi­der of this ser­vice is Meta Plat­forms Ire­land Limi­t­ed, 4 Grand Canal Squa­re, Dub­lin 2, Ire­land. Howe­ver, accor­ding to Meta, the data coll­ec­ted is also trans­fer­red to the USA and other third count­ries.

This allows the beha­vi­or of site visi­tors to be tra­cked after they have been redi­rec­ted to the provider’s web­site by cli­cking on a meta ad. This allows the effec­ti­ve­ness of the meta ads to be eva­lua­ted for sta­tis­ti­cal and mar­ket rese­arch pur­po­ses and future adver­ti­sing mea­su­res to be opti­mi­zed.

The data coll­ec­ted is anony­mous to us as the ope­ra­tor of this web­site; we can­not draw any con­clu­si­ons about the iden­ti­ty of the users. Howe­ver, the data is stored and pro­ces­sed by Meta so that a con­nec­tion to the respec­ti­ve user pro­fi­le on Face­book or Insta­gram is pos­si­ble and Meta can use the data for its own adver­ti­sing pur­po­ses in accordance with the Meta Data Usa­ge Poli­cy (https://de-de.facebook.com/about/privacy/) can be used. This enables Meta to place adver­ti­se­ments on Face­book or Insta­gram pages and other adver­ti­sing chan­nels. This use of the data can­not be influen­ced by us as the web­site ope­ra­tor.

The use of this ser­vice is based on your con­sent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Con­sent can be revo­ked at any time.

Inso­far as per­so­nal data is coll­ec­ted on our web­site with the help of the tool descri­bed here and for­ward­ed to Meta, we and Meta Plat­forms Ire­land Limi­t­ed, 4 Grand Canal Squa­re, Grand Canal Har­bour, Dub­lin 2, Ire­land are joint­ly respon­si­ble for this data pro­ces­sing (Art. 26 GDPR). The joint respon­si­bi­li­ty is limi­t­ed exclu­si­ve­ly to the coll­ec­tion of the data and its trans­fer to Meta. The pro­ces­sing car­ri­ed out by Meta after for­war­ding is not part of the joint respon­si­bi­li­ty. The obli­ga­ti­ons incum­bent on us joint­ly have been set out in a joint pro­ces­sing agree­ment. The wor­ding of the agree­ment can be found at https://www.facebook.com/legal/controller_addendum. Accor­ding to this agree­ment, we are respon­si­ble for pro­vi­ding the data pro­tec­tion infor­ma­ti­on when using the Meta tool and for the secu­re imple­men­ta­ti­on of the tool on our web­site in accordance with data pro­tec­tion law. Meta is respon­si­ble for the data secu­ri­ty of the Meta pro­ducts. You can assert data sub­ject rights (e.g. requests for infor­ma­ti­on) regar­ding the data pro­ces­sed by Face­book or Insta­gram direct­ly with Meta. If you assert your data sub­ject rights with us, we are obli­ged to for­ward them to Meta.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You will find fur­ther infor­ma­ti­on on the pro­tec­tion of your pri­va­cy in Meta’s data pro­tec­tion infor­ma­ti­on: https://de-de.facebook.com/about/privacy/.

You can also acti­va­te the remar­ke­ting func­tion “Cus­tom Audi­en­ces” in the ad set­tings sec­tion under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deac­ti­va­te it. You must be log­ged in to Face­book to do this.

If you do not have a Face­book or Insta­gram account, you can deac­ti­va­te usa­ge-based adver­ti­sing from Meta on the web­site of the Euro­pean Inter­ac­ti­ve Digi­tal Adver­ti­sing Alli­ance: http://www.youronlinechoices.com/de/praferenzmanagement/.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on on this can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/4452.

6th Newsletter

Newsletter data

If you would like to recei­ve the news­let­ter offe­red on the web­site, we requi­re an e‑mail address from you as well as infor­ma­ti­on that allows us to veri­fy that you are the owner of the e‑mail address pro­vi­ded and that you agree to recei­ve the news­let­ter. No fur­ther data is coll­ec­ted, or only on a vol­un­t­a­ry basis. We use this data exclu­si­ve­ly for sen­ding the reques­ted infor­ma­ti­on and do not pass it on to third par­ties.

The data ente­red in the news­let­ter regis­tra­ti­on form is pro­ces­sed exclu­si­ve­ly on the basis of your con­sent (Art. 6 para. 1 lit. a GDPR). You can revo­ke your con­sent to the sto­rage of the data, the e‑mail address and its use for sen­ding the news­let­ter at any time, for exam­p­le via the “unsub­scri­be” link in the news­let­ter. The lega­li­ty of the data pro­ces­sing ope­ra­ti­ons that have alre­a­dy taken place remains unaf­fec­ted by the revo­ca­ti­on.

The data you pro­vi­de us with for the pur­po­se of sub­scrib­ing to the news­let­ter will be stored by us or the news­let­ter ser­vice pro­vi­der until you unsub­scri­be from the news­let­ter and dele­ted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be from the news­let­ter or after the pur­po­se no lon­ger appli­es. We reser­ve the right to dele­te or block e‑mail addres­ses from our news­let­ter dis­tri­bu­ti­on list at our own dis­cre­ti­on within the scope of our legi­ti­ma­te inte­rest in accordance with Art. 6 para. 1 lit. f GDPR.

Data stored by us for other pur­po­ses remains unaf­fec­ted by this.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your e‑mail address may be stored by us or the news­let­ter ser­vice pro­vi­der in a black­list if this is neces­sa­ry to pre­vent future mai­lings. The data from the black­list will only be used for this pur­po­se and will not be mer­ged with other data. This ser­ves both your inte­rest and our inte­rest in com­ply­ing with the legal requi­re­ments when sen­ding news­let­ters (legi­ti­ma­te inte­rest within the mea­ning of Art. 6 para. 1 lit. f GDPR). Sto­rage in the black­list is not limi­t­ed in time. You can object to the sto­rage if your inte­rests out­weigh our legi­ti­ma­te inte­rest.

7. plugins and tools

Google Maps

This site uses the map ser­vice Goog­le Maps. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. With the help of this ser­vice, we can inte­gra­te map mate­ri­al on our web­site.

To use the func­tions of Goog­le Maps, it is neces­sa­ry to save your IP address. This infor­ma­ti­on is usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored the­re. The pro­vi­der of this site has no influence on this data trans­fer. If Goog­le Maps is acti­va­ted, Goog­le may use Goog­le Fonts for the pur­po­se of uni­form dis­play of fonts. When you call up Goog­le Maps, your brow­ser loads the requi­red web fonts into your brow­ser cache in order to dis­play texts and fonts cor­rect­ly.

The use of Goog­le Maps is in the inte­rest of an appe­al­ing pre­sen­ta­ti­on of our online offers and to make it easy to find the places we have indi­ca­ted on the web­site. This con­sti­tu­tes a legi­ti­ma­te inte­rest within the mea­ning of Art. 6 para. 1 lit. f GDPR. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be revo­ked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more infor­ma­ti­on on the hand­ling of user data in Google’s pri­va­cy poli­cy: https://policies.google.com/privacy?hl=de.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on on this can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/5780.

Google reCAPTCHA

We use “Goog­le reCAPTCHA” (her­ein­af­ter “reCAPTCHA”) on this web­site. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

The pur­po­se of reCAPTCHA is to check whe­ther data is ente­red on this web­site (e.g. in a cont­act form) by a human or by an auto­ma­ted pro­gram. For this pur­po­se, reCAPTCHA ana­ly­zes the beha­vi­or of the web­site visi­tor based on various cha­rac­te­ristics. This ana­ly­sis beg­ins auto­ma­ti­cal­ly as soon as the web­site visi­tor enters the web­site. For the ana­ly­sis, reCAPTCHA eva­lua­tes various infor­ma­ti­on (e.g. IP address, time spent on the web­site by the web­site visi­tor or mou­se move­ments made by the user). The data coll­ec­ted during the ana­ly­sis is for­ward­ed to Goog­le.

The reCAPTCHA ana­ly­ses run com­ple­te­ly in the back­ground. Web­site visi­tors are not infor­med that an ana­ly­sis is taking place.

The data is stored and ana­ly­zed on the basis of Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in pro­tec­ting its web­site from abu­si­ve auto­ma­ted spy­ing and SPAM. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be revo­ked at any time.

For more infor­ma­ti­on about Goog­le reCAPTCHA, plea­se refer to the Goog­le Pri­va­cy Poli­cy and the Goog­le Terms of Ser­vice at the fol­lo­wing links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on on this can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/participant/5780.

8. eCommerce and payment providers

Processing of customer and contract data

We coll­ect, pro­cess and use per­so­nal cus­to­mer and con­tract data to estab­lish, struc­tu­re the con­tent of and amend our con­trac­tu­al rela­ti­onships. We coll­ect, pro­cess and use per­so­nal data about the use of this web­site (usa­ge data) only inso­far as this is neces­sa­ry to enable or char­ge the user for the use of the ser­vice. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The cus­to­mer data coll­ec­ted will be dele­ted after com­ple­ti­on of the order or ter­mi­na­ti­on of the busi­ness rela­ti­onship and expiry of any exis­ting sta­tu­to­ry reten­ti­on peri­ods. Sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted.

9. own services

Handling applicant data

We offer you the oppor­tu­ni­ty to app­ly to us (e.g. by e‑mail, post or via the online appli­ca­ti­on form). Below we inform you about the scope, pur­po­se and use of your per­so­nal data coll­ec­ted as part of the appli­ca­ti­on pro­cess. We assu­re you that your data will be coll­ec­ted, pro­ces­sed and used in accordance with appli­ca­ble data pro­tec­tion law and all other sta­tu­to­ry pro­vi­si­ons and that your data will be trea­ted in strict con­fi­dence.

Scope and purpose of data collection

If you send us an appli­ca­ti­on, we pro­cess your asso­cia­ted per­so­nal data (e.g. cont­act and com­mu­ni­ca­ti­on data, appli­ca­ti­on docu­ments, notes taken during job inter­views, etc.) inso­far as this is neces­sa­ry to deci­de on the estab­lish­ment of an employ­ment rela­ti­onship. The legal basis for this is § 26 BDSG under Ger­man law (initia­ti­on of an employ­ment rela­ti­onship), Art. 6 para. 1 lit. b GDPR (gene­ral con­tract initia­ti­on) and — if you have given your con­sent — Art. 6 para. 1 lit. a GDPR. Con­sent can be revo­ked at any time. Your per­so­nal data will only be pas­sed on within our com­pa­ny to per­sons who are invol­ved in pro­ces­sing your appli­ca­ti­on.

If the appli­ca­ti­on is suc­cessful, the data sub­mit­ted by you will be stored in our data pro­ces­sing sys­tems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the pur­po­se of imple­men­ting the employ­ment rela­ti­onship.

Data retention period

If we are unable to make you a job offer, you reject a job offer or with­draw your appli­ca­ti­on, we reser­ve the right to retain the data you have sub­mit­ted on the basis of our legi­ti­ma­te inte­rests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the appli­ca­ti­on pro­cess (rejec­tion or with­dra­wal of the appli­ca­ti­on). The data will then be dele­ted and the phy­si­cal appli­ca­ti­on docu­ments des­troy­ed. The reten­ti­on ser­ves in par­ti­cu­lar as evi­dence in the event of a legal dis­pu­te. If it is evi­dent that the data will be requi­red after the expiry of the 6‑month peri­od (e.g. due to an impen­ding or pen­ding legal dis­pu­te), dele­ti­on will only take place when the pur­po­se for fur­ther sto­rage no lon­ger appli­es.

Data may also be stored for lon­ger if you have given your con­sent (Art. 6 para. 1 lit. a GDPR) or if sta­tu­to­ry reten­ti­on obli­ga­ti­ons pre­vent dele­ti­on.

Inclusion in the applicant pool

If we do not make you a job offer, you may have the oppor­tu­ni­ty to be included in our appli­cant pool. If you are accept­ed, all docu­ments and details from your appli­ca­ti­on will be trans­fer­red to the appli­cant pool so that you can be cont­ac­ted in the event of sui­ta­ble vacan­ci­es.

Inclu­si­on in the appli­cant pool is based exclu­si­ve­ly on your express con­sent (Art. 6 para. 1 lit. a GDPR). Giving your con­sent is vol­un­t­a­ry and is not rela­ted to the cur­rent appli­ca­ti­on pro­cess. The data sub­ject can with­draw their con­sent at any time. In this case, the data will be irre­vo­ca­bly dele­ted from the appli­cant pool, pro­vi­ded the­re are no legal grounds for reten­ti­on.

The data from the appli­cant pool will be irre­vo­ca­bly dele­ted no later than two years after con­sent has been gran­ted.