Privacy Statement

We currently use only technically necessary cookies on our website. These are required to provide the website securely, stably and properly functioning. We do not currently use analytics, marketing or retargeting cookies.

Necessary Cookies
We use only technically necessary cookies that are required for the operation, security and basic functions of our website. The legal basis is Section 25 (2) TDDDG and – insofar as personal data is processed – Art. 6 (1) lit. f GDPR.

Analytics & Marketing Cookies
We currently do not use any analytics or marketing cookies that require consent. At present, no personalized tracking of user behavior for advertising or profiling purposes takes place.

Third-Party Cookies
We currently do not use any consent-based third-party cookies on our website for analytics, marketing or retargeting purposes. Should external services be integrated in the future, we will update this privacy notice accordingly and, where required, obtain your consent.

You can contact us at any time. Please note the following:

General Contact Options
You can contact us via:

• Postal mail
• Telephone
• Email

To process your inquiry, we will need to store your communication data (e.g., phone number, email address) and identification data (e.g., name, address).

The legal basis for this is Art. 6 (1) lit. b) GDPR, but only if the contact relates to initiating, performing, or modifying a contractual relationship.

For all other cases of contact, processing is based on the legitimate interest pursuant to Art. 6 (1) lit. f) GDPR of the company.

The legitimate interest for this processing is as follows: As a company, we pursue the economic interests of individualizing and optimizing our products, which are declared as economic factors of the company.

We use Microsoft Teams, a service provided by Microsoft Corporation, to conduct telephone and video conferences, online meetings, and/or online seminars. If online meetings/online seminars are to be recorded, we will inform you before the start of the meeting/seminar and – where required – request your (verbal) consent. If you do not wish to be recorded, you can leave the online meeting/seminar.

The following personal data may be processed:

User Information: Display name, email address, profile picture (optional), preferred language

Meeting Metadata: e.g., date, time, meeting ID, phone number, location

Text, Audio, and Video Data: You may have the option to use the chat function during an online meeting/seminar. In this case, any text entries you make will be processed to display them in the meeting/seminar.

The scope of the data depends on the information you provide before or during participation in the online meeting/seminar. Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses pursuant to Art. 46 (2) lit. c) GDPR.

Legal Basis for Online Meetings

The legal basis for processing is Art. 6 (1) lit. b) GDPR. During the online meeting, the login names of all participants as well as the generated communication content are displayed and can be viewed by other participants in the meeting. The communication content is stored for documentation purposes. If applicable, the online meeting will be recorded and subsequently made available to participants.

Legal Basis for Online Seminars

The legal basis for processing is our legitimate interest in providing an engaging design for our online seminar, Art. 6 (1) lit. f) GDPR.

During the online seminar, the login names of all participants as well as the generated communication content are displayed and can be viewed by other participants in the seminar. The communication content is stored for documentation purposes. If applicable, the online seminar will be recorded and subsequently made available to participants.

With the following information, we inform you in accordance with Art. 13 GDPR about the processing of your personal data within the application process and about your rights.

We offer you the opportunity to apply with us (via email, the online application form, or by post). Below, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data is carried out in compliance with applicable data protection laws and all other legal provisions, and that your data will be treated confidentially. If you submit an application to us, we process your associated personal data (e.g., contact and communication details, application documents, notes from interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship.

The legal basis for this is Art. 6 (1) lit. b) GDPR (general contract initiation). Your personal data will only be shared within our company with employees involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems for the purpose of carrying out the employment relationship, based on Art. 6 (1) lit. b) GDPR.

If we cannot offer you a position, you decline an offer, or withdraw your application, we will store your application documents for a period of 6 months after the conclusion of the process. After the 6-month period, the data will be deleted and physical application documents destroyed. Retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period (e.g., due to a pending or threatened legal dispute), deletion will only occur when the purpose for further retention no longer applies.

Inclusion in Our Applicant Pool
If we cannot offer you a position, there may be an option to include you in our applicant pool. If included, all documents and information from your application will be added to the pool so we can contact you in case of suitable vacancies.

Inclusion in the applicant pool is based solely on your explicit consent (Art. 6 (1) lit. a) GDPR). Giving consent is voluntary and unrelated to the ongoing application process. You can revoke your consent at any time. In this case, the data in the applicant pool will be permanently deleted unless there are legal retention requirements.

Data from the applicant pool will be permanently deleted no later than two years after consent is given.

For our application management, we use the system “Factorial HR.” The provider is EVERYDAY SOFTWARE S.L., Calle Alaba, 61 5º-2ª, 08005 Barcelona, Spain, with whom we have concluded a data processing agreement.

We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.

Social networks such as Facebook, Twitter, etc., can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-relevant processing operations.

Specifically: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can associate this visit with your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. This data collection occurs, for example, via cookies stored on your device or by capturing your IP address.

Using the data collected in this way, the operators of social media portals can create user profiles that store your preferences and interests. This allows interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on social media portals. Depending on the provider, additional processing operations may be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.

Legal Basis

Our social media presence aims to ensure the most comprehensive visibility on the internet. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f) GDPR.

The analysis processes initiated by social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g., consent under Art. 6 (1) lit. a) GDPR).

Controller and Exercising Your Rights

When you visit one of our social media profiles (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during your visit. You can generally exercise your rights (access, rectification, erasure, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., Facebook).

Please note that despite joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options depend largely on the policies of the respective provider.

Storage Duration

The data we collect directly via our social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – especially retention periods – remain unaffected.

We have no influence on the storage duration of your data that is stored by the operators of social networks for their own purposes. For details, please refer directly to the operators of the social networks (e.g., in their privacy policies, see below).

Social Networks in Detail

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.

We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at:
https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your ad settings independently in your user account. Click the following link and log in:
https://www.facebook.com/settings?tab=ads

Data transfer to the USA is based on the EU Commission’s standard contractual clauses.
Details:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381

Facebook’s privacy policy:
https://www.facebook.com/about/privacy/

Instagram

We have a profile on Instagram. The provider is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). According to the provider, the collected data is also transferred to the USA and other third countries. Data transfer to the USA is based on the EU Commission’s standard contractual clauses.

Details:
https://www.facebook.com/privacy/policy/version/20220104/
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381

Instagram’s privacy policy:
https://help.instagram.com/519522125107875

LinkedIn

We use functions of the LinkedIn network on our website, a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you access our website containing LinkedIn functions, a connection to LinkedIn servers is established. To our knowledge, no personal data is stored, particularly IP addresses are not stored, nor is usage behavior evaluated.

The legal basis for using the LinkedIn plugin is Art. 6 (1) lit. f) GDPR. We have a legitimate interest in achieving the most comprehensive visibility in social media.

Further information:
https://www.linkedin.com/legal/privacy-policy