Privacy Policy

(1) You have the following rights towards a controller with regard to the personal data concerning you:

• the right of access,
• the right to rectification or erasure,
• the right to restriction of processing,
• the right to object to processing,
• the right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

When the website is used for information purposes only, i.e. simply viewed without registration and without you otherwise transmitting information to us, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure its stability and security, and must therefore be processed by us. The legal basis is Art. 6 (1) sentence 1 (f) GDPR:

• IP address
• date and time of the request
• time zone difference to Greenwich Mean Time (GMT)
• content of the request (page visited)
• access status/HTTP status code
• amount of data transferred in each case
• previously visited page
• browser
• operating system
• language and version of the browser software.

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested, and we use other common functions to analyse or market our offers, which are described in more detail below. For this you usually have to provide further personal data, or we process such further data that we use to provide the respective service. The data processing principles set out above apply to all data processing purposes described here.

(2) In some cases we use external service providers to process your data. They have been carefully selected by us, are bound by our instructions and are checked regularly.

(3) We may also pass your personal data on to third parties if participation in promotions, competitions, the conclusion of contracts or similar services are offered by us together with partners. Depending on the service, your data may also be collected by the partners under their own responsibility. You will receive more information when you provide your data or below in the description of the respective offer.

(4) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the consequences of this in the description of the offer.

(1) If you have given consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the permissibility of processing your personal data after you have declared it to us. The permissibility of processing your data up to the time of your withdrawal remains unaffected.

(2) Where we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case in particular where processing is not necessary for the performance of a contract with you, which we indicate in each case in the description of the functions below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. If your objection is justified, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to exercise your objection to advertising is via the contact details given above.

(1) In addition to the data mentioned above, when you use our website we use technical tools for various functions, in particular cookies, which can be stored on your device. When you access our website and at any time afterwards, you can choose whether to allow cookies in general or which individual additional functions you want to select. You can make changes in your browser settings or via our consent manager. Below we first describe cookies from a technical point of view (2), before going into more detail about your individual choices by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).

(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can flow to the party that sets the cookie. Cookies cannot run programs or transfer viruses to your computer; their main purpose is to make the website faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis we explain below:

• Transient cookies: these, in particular session cookies, are deleted automatically when you close your browser or log out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the common session, and your computer can be recognised when you return to our website.
• Persistent cookies: these are deleted automatically after a specified period, which differs depending on the cookie. You can view the cookies set and their lifetimes in your browser settings at any time and delete the cookies manually.

(3) Mandatory functions technically necessary to display the website: The technical structure of the website requires us to use techniques, in particular cookies. Without these techniques our website cannot be displayed (fully correctly) or the support functions could not be provided. These are generally transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you want to use our website. The individual cookies can be seen in the consent manager. The legal basis for this processing is Art. 6 (1) sentence 1 (f) GDPR.

(4) Optional cookies with your consent: We only set various cookies with your consent, which you can select via the so-called cookie consent tool on your first visit to our website. The functions are only activated if you agree and may in particular serve to let us analyse and improve visits to our website, make it easier for you to use it across different browsers or devices, recognise you on a visit, or show advertising (where applicable also to tailor advertising to interests, measure the effectiveness of ads or show interest-based advertising). The legal basis for this processing is Art. 6 (1) sentence 1 (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing up to the withdrawal. The functions we use, which you can each select and withdraw individually via the consent manager, are described below.

This website is hosted by an external service provider:

Germany: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur

The personal data collected on this website is stored on the servers of the external service provider; see the list in § 3 (1). Our external service provider only processes your data where this is necessary to fulfil its contractual obligations and it follows our instructions regarding your data.

As the external service provider acts on our behalf with regard to the collection, processing and use of personal data, we have concluded a data processing agreement with the service provider to meet the requirements of Art. 28 GDPR.

The legal basis for using the external service provider is Art. 6 (1) sentence 1 (b) and (f) GDPR.

Use of social media plug-ins

We currently do not use any social media plug-ins.

We use Microsoft Teams, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, to hold real-time video or audio conferences.

When you communicate with us by video or audio conference, your personal data is collected both by us and by Microsoft Teams.

The following data is collected:

• email address
• telephone number
• start and end of participation in the conference
• duration of the conference
• number of conference participants
• other “contextual information” related to the communication (metadata)
• all technical data required to handle the online communication (in particular IP address, MAC address, device IDs, device type, operating system and its interface, client version, camera type, microphone, speakers, type of connection)

Microsoft Teams also stores on its servers the exchange, upload or other provision of content. This includes in particular the following content:

• chat/instant messages
• cloud recordings
• photos and videos uploaded via voicemail, files, whiteboards and other information shared while using the service.

We process and store your personal data initially for as long as the respective purpose of use requires. Where applicable, this also includes the periods of initiating and performing a contract. On this basis, personal data is regularly deleted in the course of fulfilling our contractual and/or legal obligations, unless its temporary further processing is necessary for the following purposes:

• fulfilment of statutory retention obligations arising, for example, from the German Commercial Code (§§ 238, 257 (4) HGB) and the German Fiscal Code (§ 147 (3), (4) AO). The retention and documentation periods specified there are up to ten years.
• preservation of evidence within the statutory limitation periods. Under §§ 194 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

The provisions in §§ 3 and 5 of this privacy policy apply to the exercise of your rights.

Further legal information about this service (such as policies and terms and conditions) can be found at https://www.microsoft.com/de-de/rechtliche-hinweise/nutzungsbedingungen and https://www.microsoft.com/de-de/servicesagreement/. The service's privacy statement can be viewed at https://privacy.microsoft.com/de-de/privacystatement.

As Microsoft Teams acts on our behalf with regard to the collection, processing and use of personal data, we have concluded a data processing agreement with Zoom to meet the requirements of Art. 28 GDPR.

The legal basis for using Zoom is Art. 6 (1) sentence 1 (b) and (f) GDPR.

All information you send us is stored on servers within the European Union. Unfortunately, the transmission of information over the internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website over the internet. However, we protect our website and other systems with technical and organisational measures against loss, destruction, access, alteration or distribution of your data by unauthorised persons. In particular, your personal data is transmitted to us in encrypted form. For this we use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption system.

We do not pass your personal data on to third parties unless you have consented to the disclosure or we are entitled or obliged to disclose it on the basis of statutory provisions and/or official or court orders. This may in particular involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

In the course of recruitment, a contracted personnel service provider based in a third country may act as a processor in accordance with Art. 28 GDPR. The service provider accesses personal data only to the extent necessary to carry out the application process. This includes in particular the application documents submitted by applicants.

Personal data is processed on the basis of Art. 88 GDPR in conjunction with § 26 BDSG for the purpose of deciding on the establishment of an employment relationship. Access to the data is secured by appropriate technical and organisational measures. The data is not transferred to the service provider or to other third parties; this is solely data-protection-compliant, purpose-bound access as part of processing on our behalf.

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for third-party content or privacy terms. Please check the applicable privacy terms before submitting personal data to these websites.

We reserve the right to change this privacy policy at any time with effect for the future. The current version is always available on the website. Please visit the website regularly to inform yourself about the applicable privacy terms.