Privacy Policy

1. Privacy at a Glance

General Information

The fol­low­ing infor­ma­tion pro­vides a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data refers to any data that can be used to per­son­al­ly iden­ti­fy you. For detailed infor­ma­tion on data pro­tec­tion, please refer to our Pri­va­cy Pol­i­cy list­ed below this text.

Data Collection on This Website

Who is respon­si­ble for data col­lec­tion on this web­site?

Data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find the operator’s con­tact infor­ma­tion in the legal notice sec­tion of this web­site.

How do we col­lect your data?

Your data is col­lect­ed, on the one hand, when you pro­vide it to us. This may include, for exam­ple, data you enter into a con­tact form.

Oth­er data is col­lect­ed auto­mat­i­cal­ly by our IT sys­tems when you vis­it the web­site. This con­sists pri­mar­i­ly of tech­ni­cal data (e.g., inter­net brows­er, oper­at­ing sys­tem, or time of page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you access this web­site.

What do we use your data for?

Some of the data is col­lect­ed to ensure the web­site func­tions prop­er­ly. Oth­er data may be used to analyse your user behav­iour.

What rights do you have regard­ing your data?

You have the fol­low­ing rights in rela­tion to your per­son­al data, which you may exer­cise by con­tact­ing us:
Right of access (Art. 15 GDPR),
Right to receive the data in a struc­tured, com­mon­ly used, machine-read­able for­mat (‘data porta­bil­i­ty’) and the right to have the data trans­mit­ted to anoth­er con­troller, pro­vid­ed the con­di­tions set out in Art. 20(1)(a) and (b) GDPR are met (Art. 20 GDPR),
• Right to rec­ti­fi­ca­tion (Art. 16 GDPR) or era­sure (Art. 17 GDPR),
• Right to restric­tion of pro­cess­ing (Art. 18 GDPR),
• Right to object to pro­cess­ing (Art. 21 GDPR),
• Right to with­draw your con­sent (Arti­cle 7(3) of the GDPR).

You may exer­cise your rights by con­tact­ing us using the con­tact details pro­vid­ed below or else­where on this web­site, e.g.:

cal­cIT Solu­tions GmbH
Hum­boldt­straße 13
07743 Jena
Tele­phone: 0049 3641 28440
Email: info@orisa.de

or

Email: post@landgraf-datenschutz.de

You also have the right to lodge a com­plaint with a data pro­tec­tion super­vi­so­ry author­i­ty regard­ing our pro­cess­ing of your per­son­al data (Arti­cle 77 of the GDPR). The right to object can be exer­cised, in par­tic­u­lar, with the super­vi­so­ry author­i­ty respon­si­ble for us: Thuringian State Com­mis­sion­er for Data Pro­tec­tion and Free­dom of Infor­ma­tion (TLf­DI), Häßler­straße 8, 99096 Erfurt, tele­phone: +49 361 57311–200, email: poststelle@tldi.thueringen.de, www.tlfdi.de. This right to sub­mit a com­plaint is with­out prej­u­dice to any oth­er legal reme­dies.

Management of Cookies and Your Consent to Our Services

We use the con­sent tool “Real Cook­ie Ban­ner” to man­age the cook­ies and sim­i­lar tech­nolo­gies we use, as well as the relat­ed con­sents. Details on how “Real Cook­ie Ban­ner” works can be found here.

The stor­age and read­ing of cook­ies and sim­i­lar tech­nolo­gies on your device is car­ried out on the basis of Sec­tion 25(1) of the TTDSG (cook­ies requir­ing con­sent) in con­junc­tion with Arti­cle 6(1), first sen­tence, point (a) of the GDPR, or Sec­tion 25(2)(2) of the TTDSG (tech­ni­cal­ly nec­es­sary cook­ies) in con­junc­tion with Arti­cle 6(1), first sen­tence, point (f) of the GDPR. The sub­se­quent pro­cess­ing of the per­son­al data col­lect­ed in this way is gov­erned by Arti­cle 6(1), point (a) of the GDPR (where con­sent has been giv­en) or Arti­cle 6(1), points © and (f) of the GDPR. Our legit­i­mate inter­est is the legal­ly com­pli­ant man­age­ment of the cook­ies used and the asso­ci­at­ed con­sents. The evi­dence of con­sent col­lect­ed as part of con­sent man­age­ment (time stamp, con­sent ver­sion, tech­ni­cal iden­ti­fi­er) is stored for a peri­od of 2 years in order to ful­fil our oblig­a­tion to pro­vide evi­dence in accor­dance with Arti­cle 7(1) of the GDPR. Our legit­i­mate inter­est is the man­age­ment of the cook­ies and sim­i­lar tech­nolo­gies used and the relat­ed con­sents.

The pro­vi­sion of per­son­al data is nei­ther con­trac­tu­al­ly required nor nec­es­sary for the con­clu­sion of a con­tract. You are not required to pro­vide per­son­al data. If you do not pro­vide per­son­al data, we will not be able to man­age your con­sents.

Change pri­va­cy set­tings His­to­ry of pri­va­cy set­tings With­draw con­sents

Analytics tools and third-party tools

When you vis­it this web­site, your brows­ing behav­iour may be analysed for sta­tis­ti­cal pur­pos­es. This is pri­mar­i­ly done using cook­ies and so-called ana­lyt­ics pro­grams. The analy­sis of your brows­ing behav­iour is gen­er­al­ly anony­mous; your brows­ing behav­iour can­not be traced back to you.

You can object to this analy­sis or pre­vent it by not using cer­tain tools. Detailed infor­ma­tion about these tools and your options for object­ing can be found in the fol­low­ing pri­va­cy pol­i­cy.

2. Hosting

External Hosting

This web­site is host­ed by Host­Press GmbH, Bahn­hof­s­traße 34, 66571 Eppel­born (Ger­many). Per­son­al data col­lect­ed on this web­site is stored on the host’s servers. This may pri­mar­i­ly include IP address­es, con­tact enquiries, meta and com­mu­ni­ca­tion data, con­trac­tu­al data, con­tact details, names, web­site vis­its and oth­er data gen­er­at­ed via a web­site.

The use of the host is for the pur­pose of ful­fill­ing our con­trac­tu­al oblig­a­tions towards our poten­tial and exist­ing cus­tomers (Art. 6(1)(b) GDPR) and in the inter­est of a secure, fast and effi­cient pro­vi­sion of our online ser­vices by a pro­fes­sion­al provider (Art. 6(1)(f) GDPR).

Our host­ing provider will only process your data to the extent nec­es­sary to ful­fil its ser­vice oblig­a­tions and will fol­low our instruc­tions regard­ing this data.

Con­clu­sion of a data pro­cess­ing agree­ment

To ensure data pro­cess­ing com­plies with data pro­tec­tion reg­u­la­tions, we have con­clud­ed a data pro­cess­ing agree­ment with our host­ing provider.

3. General information and mandatory notices

Data Protection

The oper­a­tors of this web­site take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with statu­to­ry data pro­tec­tion reg­u­la­tions and this pri­va­cy pol­i­cy.

When you use this web­site, var­i­ous per­son­al data is col­lect­ed. Per­son­al data is data that can be used to iden­ti­fy you per­son­al­ly. This pri­va­cy pol­i­cy explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this is done.

Please note that data trans­mis­sion over the inter­net (e.g. when com­mu­ni­cat­ing by email) may be sub­ject to secu­ri­ty vul­ner­a­bil­i­ties. It is not pos­si­ble to pro­vide com­plete pro­tec­tion of data against access by third par­ties.

Information on the data controller

The data con­troller respon­si­ble for data pro­cess­ing on this web­site is:

cal­cIT Solu­tions GmbH
Hum­boldt­straße 13
07743 Jena

Phone: +49 3641 28440
Email: info@orisa.de

The con­troller is the nat­ur­al or legal per­son who, alone or joint­ly with oth­ers, deter­mines the pur­pos­es and means of the pro­cess­ing of per­son­al data (e.g. names, email address­es, etc.).

Statutory Data Protection Officer

We have appoint­ed a Data Pro­tec­tion Offi­cer for our com­pa­ny. You can reach them as fol­lows:

Land­graf Daten­schutz GmbH
Markt 22
07743 Jena

Phone: +49 3641 3161182
Email: dsb@landgraf-datenschutz.de

Withdrawal of your consent to data processing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your explic­it con­sent. You may with­draw any con­sent you have already giv­en at any time. To do so, sim­ply send us an infor­mal email. The law­ful­ness of the data pro­cess­ing car­ried out pri­or to the with­draw­al remains unaf­fect­ed by the with­draw­al.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(e) E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, exer­cise or defence of legal claims (objec­tion under Arti­cle 21(1) of the GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

SSL or TLS encryption

This web­site uses SSL or TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or enquiries that you send to us as the web­site oper­a­tor. You can recog­nise an encrypt­ed con­nec­tion by the fact that the address bar of your brows­er changes from “http://” to “https://” and by the pad­lock sym­bol in your brows­er bar.

When SSL or TLS encryp­tion is active, the data you trans­mit to us can­not be read by third par­ties

 

4. Data collection on this website

 

Server log files

The web­site provider auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er auto­mat­i­cal­ly trans­mits to us. This includes:

• Brows­er type and ver­sion
• Oper­at­ing sys­tem used
• Refer­rer URL
• Host name of the access­ing com­put­er
• Time of the serv­er request
• IP Address

This data is not com­bined with oth­er data sources. For secu­ri­ty rea­sons, serv­er log files are stored for a peri­od of 30 days and then delet­ed. Data that needs to be retained for the pur­pos­es of pre­serv­ing evi­dence will be kept until the inci­dent in ques­tion has been ful­ly resolved.

The col­lec­tion of this data is based on Arti­cle 6(1)(f) of the GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the tech­ni­cal­ly error-free pre­sen­ta­tion and opti­mi­sa­tion of its web­site – to this end, the serv­er log files must be col­lect­ed.

Contact form

If you send us enquiries via the con­tact form, the details you pro­vide in the form, includ­ing the con­tact details you enter there, will be stored by us for the pur­pose of pro­cess­ing your enquiry and in case of any fol­low-up ques­tions. We will not pass on this data with­out your con­sent.

The pro­cess­ing of this data is based on Arti­cle 6(1)(b) of the GDPR, pro­vid­ed that your enquiry relates to the per­for­mance of a con­tract or is nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive han­dling of enquiries addressed to us (Arti­cle 6(1)(f) of the GDPR) or on your con­sent (Arti­cle 6(1)(a) of the GDPR), pro­vid­ed this has been request­ed.

The data you enter in the con­tact form will remain with us until you request its dele­tion, with­draw your con­sent to its stor­age, or the pur­pose for stor­ing the data no longer applies (e.g. once your enquiry has been processed). Pro­vid­ing your per­son­al data in the con­tact form is vol­un­tary. The fields marked with an aster­isk (*) are manda­to­ry and must be com­plet­ed in order for us to process your enquiry. With­out this infor­ma­tion, we will be unable to con­tact you or deal with your enquiry. Manda­to­ry legal pro­vi­sions – in par­tic­u­lar reten­tion peri­ods – remain unaf­fect­ed.

Enquiries by email, telephone or fax

If you con­tact us by email, tele­phone or fax, your enquiry, includ­ing all per­son­al data con­tained there­in (name, enquiry), will be stored and processed by us for the pur­pose of deal­ing with your request. We will not dis­close this data with­out your con­sent.

The pro­cess­ing of this data is based on Arti­cle 6(1)(b) of the GDPR, pro­vid­ed that your enquiry relates to the per­for­mance of a con­tract or is nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, pro­cess­ing is based on your con­sent (Arti­cle 6(1)(a) of the GDPR) and/or on our legit­i­mate inter­ests (Arti­cle 6(1)(f) of the GDPR), as we have a legit­i­mate inter­est in the effec­tive pro­cess­ing of enquiries addressed to us.

The data you send to us via con­tact enquiries will remain with us until you request its dele­tion, with­draw your con­sent to its stor­age, or the pur­pose for stor­ing the data no longer applies (e.g. once your enquiry has been ful­ly processed). Manda­to­ry legal pro­vi­sions – in par­tic­u­lar statu­to­ry reten­tion peri­ods – remain unaf­fect­ed.

 

5. Analytics Tools and Advertising

Google Analytics 4

This web­site uses Google Ana­lyt­ics 4 (GA4), a web ana­lyt­ics ser­vice pro­vid­ed by Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.
GA4 uses tech­nolo­gies (includ­ing cook­ies and device iden­ti­fiers) that enable the analy­sis of how this web­site is used. The infor­ma­tion col­lect­ed in this process is gen­er­al­ly trans­mit­ted to a Google serv­er in the USA and stored there. Google Ana­lyt­ics 4 does not store IP address­es per­ma­nent­ly; they are anonymised before being stored.
The use of GA4 is based sole­ly on your explic­it con­sent (Sec­tion 25(1) of the Ger­man Tele­me­dia Act (TTDSG) in con­junc­tion with Arti­cle 6(1)(a) of the GDPR). You may with­draw your con­sent at any time with future effect via our pri­va­cy set­tings.
Trans­fers to third coun­tries: Data is trans­ferred to the USA on the basis of the EU Commission’s ade­qua­cy deci­sion regard­ing the EU-US Data Pri­va­cy Frame­work (Arti­cle 45 of the GDPR), as Google LLC is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work. In addi­tion, we have entered into an agree­ment with Google cov­er­ing EU Stan­dard Con­trac­tu­al Claus­es in accor­dance with Arti­cle 46(2)© of the GDPR.
Data pro­cess­ing on behalf of a con­troller: We have entered into a data pro­cess­ing agree­ment with Google.
Reten­tion peri­od: Data at user and event lev­el is anonymised or delet­ed after 14 months.

Demo­graph­ic char­ac­ter­is­tics: This web­site uses the ‘demo­graph­ic char­ac­ter­is­tics’ fea­ture of GA4. This enables reports to be gen­er­at­ed on the age, gen­der and inter­ests of web­site vis­i­tors. This con­sti­tutes pro­fil­ing with­in the mean­ing of Arti­cle 4(4) of the GDPR. This fea­ture is used sole­ly on the basis of your con­sent and can be dis­abled at any time via Google’s ad set­tings: https://www.google.com/settings/ads.
Fur­ther infor­ma­tion: https://support.google.com/analytics/answer/6004245?hl=de

WordPress Stats

This web­site uses the Word­Press Stats tool to analyse vis­i­tor traf­fic sta­tis­ti­cal­ly. The provider is Automat­tic Inc., 60 29th Street #343, San Fran­cis­co, CA 94110–4929, USA.

Word­Press Stats uses cook­ies that are stored on your com­put­er and enable an analy­sis of web­site usage. The infor­ma­tion gen­er­at­ed by the cook­ies regard­ing the use of this web­site is stored on servers in the USA. Your IP address is anonymised after pro­cess­ing and before stor­age.

“Word­Press Stats” cook­ies remain on your device until you delete them.

The stor­age of “Word­Press Stats” cook­ies and the use of this ana­lyt­ics tool are based on Arti­cle 6(1)(f) of the GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the anonymised analy­sis of user behav­iour in order to opti­mise both its web­site and its adver­tis­ing. Where rel­e­vant con­sent has been sought (e.g. con­sent to the stor­age of cook­ies), pro­cess­ing takes place exclu­sive­ly on the basis of Arti­cle 6(1)(a) of the GDPR; con­sent may be with­drawn at any time.

You can con­fig­ure your brows­er so that you are noti­fied when cook­ies are set and only allow cook­ies on a case-by-case basis, exclude the accep­tance of cook­ies in spe­cif­ic cas­es or gen­er­al­ly, and enable the auto­mat­ic dele­tion of cook­ies when you close your brows­er. If you dis­able cook­ies, the func­tion­al­i­ty of this web­site may be restrict­ed.

You can object to the col­lec­tion and use of your data in future by vis­it­ing the Jet­pack Pri­va­cy Cen­tre at https://jetpack.com/support/privacy/ and using the rel­e­vant opt-out option there.

If you delete the cook­ies on your com­put­er, you will need to set the opt-out cook­ie again.

Word­Press stats data is stored on servers oper­at­ed by Automat­tic Inc. in the USA. Data is trans­ferred to the USA on the basis of the Euro­pean Commission’s ade­qua­cy deci­sion regard­ing the EU-US Data Pri­va­cy Frame­work (Arti­cle 45 of the GDPR), as Automat­tic Inc. is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work.

Google Analytics Remarketing

This web­site uses the func­tions of Google Ana­lyt­ics Remar­ket­ing in con­junc­tion with the cross-device func­tions of Google Ads and Google Dou­bleClick. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

This func­tion enables the adver­tis­ing audi­ences cre­at­ed with Google Ana­lyt­ics Remar­ket­ing to be linked to the cross-device func­tions of Google Ads and Google Dou­bleClick. In this way, inter­est-based, per­son­alised adver­tis­ing mes­sages, which have been tai­lored to you based on your pre­vi­ous usage and brows­ing behav­iour on one device (e.g. mobile phone), can also be dis­played on anoth­er of your devices (e.g. tablet or PC).

If you have giv­en your con­sent, Google will link your web and app brows­ing his­to­ry to your Google Account for this pur­pose. This allows the same per­son­alised adver­tis­ing mes­sages to be dis­played on any device on which you sign in with your Google Account.

To sup­port this func­tion, Google Ana­lyt­ics col­lects Google-authen­ti­cat­ed user IDs, which are tem­porar­i­ly linked to our Google Ana­lyt­ics data to define and cre­ate audi­ences for cross-device adver­tis­ing.

You can per­ma­nent­ly opt out of cross-device remarketing/targeting by dis­abling per­son­alised adver­tis­ing; to do so, fol­low this link: https://www.google.com/settings/ads/onweb/.

The con­sol­i­da­tion of the col­lect­ed data in your Google Account is based sole­ly on your con­sent, which you may give or with­draw via Google (Art. 6(1)(a) GDPR). Data pro­cess­ing is car­ried out sole­ly on the basis of your explic­it con­sent (Sec­tion 25(1) of the TTDSG in con­junc­tion with Arti­cle 6(1)(a) of the GDPR). You may with­draw your con­sent at any time.

The legit­i­mate inter­est aris­es from the fact that the web­site oper­a­tor has an inter­est in the anonymised analy­sis of web­site vis­i­tors for adver­tis­ing pur­pos­es.

Fur­ther infor­ma­tion and the pri­va­cy pol­i­cy can be found in Google’s pri­va­cy pol­i­cy at: https://policies.google.com/technologies/ads?hl=en.

Note on pro­fil­ing: The use of Google Ana­lyt­ics Remar­ket­ing con­sti­tutes a form of pro­fil­ing with­in the mean­ing of Arti­cle 4(4) of the GDPR. Inter­est pro­files are cre­at­ed on the basis of your usage and brows­ing behav­iour in order to dis­play per­son­alised adver­tis­ing to you on oth­er web­sites. No auto­mat­ed deci­sions with legal effect (Arti­cle 22 of the GDPR) are made in this process.
Data is trans­ferred to the USA on the basis of the Euro­pean Commission’s ade­qua­cy deci­sion regard­ing the EU-US Data Pri­va­cy Frame­work and on the basis of EU Stan­dard Con­trac­tu­al Claus­es (Arti­cle 46(2)© of the GDPR).

Google Ads and Google Conversion-Tracking

This web­site uses Google Ads. Google Ads is an online adver­tis­ing pro­gramme pro­vid­ed by Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

As part of Google Ads, we use what is known as con­ver­sion track­ing. When you click on an advert dis­played by Google, a cook­ie is set for con­ver­sion track­ing. Cook­ies are small text files that the inter­net brows­er stores on the user’s com­put­er. These cook­ies expire after 30 days and are not used to per­son­al­ly iden­ti­fy users. If the user vis­its cer­tain pages on this web­site and the cook­ie has not yet expired, Google and we can recog­nise that the user clicked on the advert and was redi­rect­ed to that page.

Each Google Ads cus­tomer receives a dif­fer­ent cook­ie. The cook­ies can­not be tracked across the web­sites of Google Ads cus­tomers. The infor­ma­tion col­lect­ed using the con­ver­sion cook­ie is used to gen­er­ate con­ver­sion sta­tis­tics for Google Ads cus­tomers who have opt­ed for con­ver­sion track­ing. Cus­tomers are informed of the total num­ber of users who clicked on their ad and were redi­rect­ed to a page tagged with a con­ver­sion track­ing tag. How­ev­er, they do not receive any infor­ma­tion that can be used to per­son­al­ly iden­ti­fy users. If you do not wish to par­tic­i­pate in track­ing, you can object to this use by eas­i­ly deac­ti­vat­ing the Google con­ver­sion track­ing cook­ie via your inter­net brows­er under user set­tings. You will then not be includ­ed in the con­ver­sion track­ing sta­tis­tics.

Con­ver­sion cook­ies are stored on your device sole­ly on the basis of your pri­or con­sent in accor­dance with Sec­tion 25(1) of the TTDSG. The sub­se­quent pro­cess­ing of data is based on Arti­cle 6(1)(a) of the GDPR. You may with­draw your con­sent at any time with future effect. The web­site oper­a­tor has a legit­i­mate inter­est in analysing user behav­iour in order to opti­mise both its web­site and its adver­tis­ing. Where rel­e­vant con­sent has been request­ed (e.g. con­sent to the stor­age of cook­ies), pro­cess­ing takes place exclu­sive­ly on the basis of Arti­cle 6(1)(a) of the GDPR; con­sent may be with­drawn at any time.

Fur­ther infor­ma­tion on Google Ads and Google Con­ver­sion Track­ing can be found in Google’s pri­va­cy pol­i­cy: https://policies.google.com/privacy?hl=en.

You can con­fig­ure your brows­er so that you are noti­fied when cook­ies are set and only allow cook­ies on a case-by-case basis, exclude the accep­tance of cook­ies in spe­cif­ic cas­es or gen­er­al­ly, and enable the auto­mat­ic dele­tion of cook­ies when you close your brows­er. If you dis­able cook­ies, the func­tion­al­i­ty of this web­site may be restrict­ed.

 

6. Newsletter

Newsletter details

If you would like to sub­scribe to the newslet­ter offered on the web­site, we require your email address and infor­ma­tion that allows us to ver­i­fy that you are the own­er of the email address pro­vid­ed and that you con­sent to receiv­ing the newslet­ter. No fur­ther data is col­lect­ed, or only on a vol­un­tary basis. We use this data exclu­sive­ly for send­ing the request­ed infor­ma­tion and do not pass it on to third par­ties.

The pro­cess­ing of the data entered in the newslet­ter reg­is­tra­tion form is car­ried out exclu­sive­ly on the basis of your con­sent (Art. 6(1)(a) GDPR). You may with­draw your con­sent to the stor­age of your data and email address, as well as their use for send­ing the newslet­ter, at any time, for exam­ple via the “Unsub­scribe” link in the newslet­ter. The law­ful­ness of any data pro­cess­ing oper­a­tions that have already tak­en place remains unaf­fect­ed by this with­draw­al.

We use the fol­low­ing ser­vice provider to send out our newslet­ters: Clev­er­Reach GmbH & Co. KG, //CRASH Build­ing, Schafjück­en­weg 2, 26180 Rast­ede (Ger­many). We have entered into a data pro­cess­ing agree­ment with this ser­vice provider. Data stored by us for oth­er pur­pos­es remains unaf­fect­ed by this.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your email address may be stored by us or the newslet­ter ser­vice provider on a black­list to pre­vent future mail­ings. The data from the black­list is used sole­ly for this pur­pose and is not merged with oth­er data. This serves both your inter­ests and our inter­est in com­ply­ing with legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Arti­cle 6(1)(f) of the GDPR). Stor­age on the black­list is not time-lim­it­ed. You may object to this stor­age pro­vid­ed that your inter­ests over­ride our legit­i­mate inter­est.

 

7. Plugins and Tools

YouTube with enhanced privacy settings

This web­site embeds YouTube videos. The oper­a­tor of the site is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

We use YouTube in enhanced pri­va­cy mode. Accord­ing to YouTube, this mode ensures that YouTube does not store any infor­ma­tion about vis­i­tors to this web­site before they watch the video. How­ev­er, the enhanced pri­va­cy mode does not nec­es­sar­i­ly pre­vent data from being passed on to YouTube part­ners. Thus, YouTube estab­lish­es a con­nec­tion to the Google Dou­bleClick net­work regard­less of whether you watch a video.

As soon as you start a YouTube video on this web­site, a con­nec­tion is estab­lished with YouTube’s servers. In doing so, the YouTube serv­er is informed which of our pages you have vis­it­ed. If you are logged into your YouTube account, you allow YouTube to link your brows­ing behav­iour direct­ly to your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account.

Fur­ther­more, after start­ing a video, YouTube may store var­i­ous cook­ies on your device. With the help of these cook­ies, YouTube can obtain infor­ma­tion about vis­i­tors to this web­site. This infor­ma­tion is used, among oth­er things, to col­lect video sta­tis­tics, improve user-friend­li­ness and pre­vent fraud attempts. The cook­ies remain on your device until you delete them.

Where applic­a­ble, fur­ther data pro­cess­ing oper­a­tions may be trig­gered after start­ing a YouTube video, over which we have no con­trol.

The use of YouTube is in the inter­est of pre­sent­ing our online ser­vices in an appeal­ing man­ner. This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Arti­cle 6(1)(f) of the GDPR. Where con­sent has been sought (e.g. con­sent to the stor­age of cook­ies), pro­cess­ing is car­ried out exclu­sive­ly on the basis of Arti­cle 6(1)(a) of the GDPR; con­sent may be with­drawn at any time.

Fur­ther infor­ma­tion on data pro­tec­tion at YouTube can be found in their pri­va­cy pol­i­cy at: https://policies.google.com/privacy?hl=en.

Note on extend­ed pri­va­cy mode: Even in extend­ed pri­va­cy mode, YouTube estab­lish­es a con­nec­tion to the Google Dou­bleClick net­work when the page loads (even before a video is played). Cook­ies may be set dur­ing this process for mar­ket­ing and track­ing pur­pos­es. The embed­ding of YouTube videos is there­fore car­ried out exclu­sive­ly on the basis of your con­sent (Sec­tion 25(1) of the Ger­man Tele­me­dia Act (TTDSG) in con­junc­tion with Arti­cle 6(1)(a) of the Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR)).
Data is trans­ferred to the USA on the basis of the EU Commission’s ade­qua­cy deci­sion regard­ing the EU-US Data Pri­va­cy Frame­work (Arti­cle 45 of the GDPR), as Google LLC is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work, and on the basis of EU Stan­dard Con­trac­tu­al Claus­es (Arti­cle 46(2)© of the GDPR).

Google Web Fonts

Google Fonts are embed­ded local­ly on this web­site. No con­nec­tion is made to Google’s servers.

Google Maps (with consent)

This web­site uses the Google Maps map ser­vice via an API. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

To ensure data pro­tec­tion on this web­site, Google Maps is dis­abled when you first vis­it this web­site. A direct con­nec­tion to Google’s servers is only estab­lished once you acti­vate Google Maps your­self (con­sent pur­suant to Arti­cle 6(1)(a) of the GDPR). This pre­vents your data from being trans­mit­ted to Google the moment you first vis­it the site.

Once acti­vat­ed, Google Maps will store your IP address. This is then usu­al­ly trans­mit­ted to a Google serv­er in the USA and stored there. The provider of this site has no influ­ence over this data trans­mis­sion once Google Maps has been acti­vat­ed.

Fur­ther infor­ma­tion on the han­dling of user data can be found in Google’s pri­va­cy pol­i­cy: https://policies.google.com/privacy?hl=en .

Google reCAPTCHA

Wir nutzen „Google reCAPTCHA“ (im Fol­gen­den „reCAPTCHA“) auf dieser Web­site. Anbi­eter ist die Google Ire­land Lim­it­ed („Google“), Gor­don House, Bar­row Street, Dublin 4, Irland.

Mit reCAPTCHA soll über­prüft wer­den, ob die Dateneingabe auf dieser Web­site (z. B. in einem Kon­tak­t­for­mu­lar) durch einen Men­schen oder durch ein automa­tisiertes Pro­gramm erfol­gt. Hierzu analysiert reCAPTCHA das Ver­hal­ten des Web­sitebe­such­ers anhand ver­schieden­er Merk­male. Diese Analyse begin­nt automa­tisch, sobald der Web­sitebe­such­er die Web­site betritt. Zur Analyse wertet reCAPTCHA ver­schiedene Infor­ma­tio­nen aus (z. B. IP-Adresse, Ver­weil­dauer des Web­sitebe­such­ers auf der Web­site oder vom Nutzer getätigte Maus­be­we­gun­gen). Die bei der Analyse erfassten Dat­en wer­den an Google weit­ergeleit­et.

Die reCAPTCHA-Analy­sen laufen voll­ständig im Hin­ter­grund. Web­sitebe­such­er wer­den nicht darauf hingewiesen, dass eine Analyse stat­tfind­et.

Die Daten­ver­ar­beitung erfol­gt auf Grund­lage von Art. 6 Abs. 1 lit. f DSGVO. Der Web­site­be­treiber hat ein berechtigtes Inter­esse daran, seine Webange­bote vor miss­bräuch­lich­er automa­tisiert­er Ausspähung und vor SPAM zu schützen.

Weit­ere Infor­ma­tio­nen zu Google reCAPTCHA ent­nehmen Sie den Google-Daten­schutzbes­tim­mungen und den Google Nutzungs­be­din­gun­gen unter fol­gen­den Links: https://policies.google.com/privacy?hl=de und https://policies.google.com/terms?hl=de.

8. Our own services

Handling of applicant data

We offer you the oppor­tu­ni­ty to apply for a job with us (e.g. by email, post or via our online appli­ca­tion form). Below, we pro­vide infor­ma­tion on the scope, pur­pose and use of the per­son­al data col­lect­ed from you dur­ing the appli­ca­tion process. We assure you that the col­lec­tion, pro­cess­ing and use of your data is car­ried out in accor­dance with applic­a­ble data pro­tec­tion law and all oth­er legal pro­vi­sions, and that your data will be treat­ed as strict­ly con­fi­den­tial.

Scope and pur­pose of data col­lec­tion

When you sub­mit an appli­ca­tion to us, we process your asso­ci­at­ed per­son­al data (e.g. con­tact and com­mu­ni­ca­tion details, appli­ca­tion doc­u­ments, notes tak­en dur­ing inter­views, etc.) to the extent nec­es­sary to decide on the estab­lish­ment of an employ­ment rela­tion­ship. The legal basis for this is Sec­tion 26 of the BDSG-neu under Ger­man law (ini­ti­a­tion of an employ­ment rela­tion­ship), Arti­cle 6(1)(b) of the GDPR (gen­er­al con­tract ini­ti­a­tion) and – pro­vid­ed you have giv­en your con­sent – Arti­cle 6(1)(a) of the GDPR. Con­sent may be with­drawn at any time. Your per­son­al data will be passed on with­in our com­pa­ny exclu­sive­ly to those per­sons involved in pro­cess­ing your appli­ca­tion.

If your appli­ca­tion is suc­cess­ful, the data you have sub­mit­ted will be stored in our data pro­cess­ing sys­tems on the basis of Sec­tion 26 of the BDSG-neu and Arti­cle 6(1)(b) of the GDPR for the pur­pose of car­ry­ing out the employ­ment rela­tion­ship.

Data reten­tion peri­od

If we are unable to offer you a posi­tion, you decline a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have pro­vid­ed for up to 6 months from the end of the appli­ca­tion process (rejec­tion or with­draw­al of the appli­ca­tion) on the basis of our legit­i­mate inter­ests (Arti­cle 6(1)(f) of the GDPR). The data will then be delet­ed and the phys­i­cal appli­ca­tion doc­u­ments destroyed. The reten­tion serves, in par­tic­u­lar, as evi­dence in the event of a legal dis­pute. If it is appar­ent that the data will be required after the expiry of the 6‑month peri­od (e.g. due to an impend­ing or pend­ing legal dis­pute), dele­tion will only take place once the pur­pose for fur­ther reten­tion no longer applies.

Data may also be retained for a longer peri­od if you have giv­en your con­sent (Art. 6(1)(a) GDPR) or if statu­to­ry reten­tion oblig­a­tions pre­vent dele­tion.